medium4.3
CVE-2017-10889
TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.
Impact
TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tablepress | Tablepress | through 1.8 |