high8.8
CVE-2020-12076
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions.
Impact
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Supsystic | Data Tables Generator | before 1.9.92 |