The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.
Loading...
Loading...
Score 6.1 from GitHub Security Advisory published 2025-01-31. NVD baseline CVSS 5.4; sources differ by 0.7.
The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.
January 31, 2025
March 28, 2025
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Explore the affected products and dependency analysis for CVE-2024-12772
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.