WordPress Plugin Vulnerabilities

Pricing Table by Supsystic < 1.9.13 - Admin+ Content Injection

Description

The Pricing Table by Supsystic plugin for WordPress is vulnerable to content injection in all versions up to, and including, 1.9.12. This makes it possible for authenticated attackers, with admin-level access and above, to inject arbitrary content. This is not a security issue by default, however, administrators can grant lower-level users access to functionality that makes this a security issue.

Affects Plugins

References

Classification

Type
CONTENT INJECTION
OWASP top 10
CWE
CVSS

Miscellaneous

Original Researcher
Steven Julian
Verified
No

Timeline

Publicly Published
2024-04-22 (about 2 years ago)
Added
2024-05-03 (about 2 years ago)
Last Updated
2024-05-03 (about 2 years ago)

Other