CVE-2024-12772
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Jan 31, 2025
Updated: Feb 3, 2025
CWE ID 79
Summary
CVE-2024-12772 is a Cross Site Scripting (XSS) vulnerability affecting the Ninja Tables WordPress plugin before version 5.0.17. This issue arises due to the plugin's failure to sanitize and escape a user-supplied parameter during CSV imports. As a result, an attacker can inject malicious scripts into a webpage, potentially stealing user data or taking control of user sessions. To mitigate this risk, it is recommended that users update their Ninja Tables plugin to the latest version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share