ID de Prueba:	1.3.6.1.4.1.25623.1.0.124729
Categoría:	Web application abuses
Título:	WordPress TablePress Plugin < 2.4.3 Multiple Vulnerabilities
Resumen:	The WordPress plugin 'TablePress' is prone to multiple; vulnerabilities.
Descripción:	Summary: The WordPress plugin 'TablePress' is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-9595: The TablePress is vulnerable to Stored Cross-Site Scripting via the table cell content due to insufficient input sanitization and output escaping. - CVE-2024-45293: The security scanner that prevents XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white spaces. On servers that allow users to upload their own Excel (XLSX) sheets, Server files, and sensitive information can be disclosed by providing a crafted sheet. Affected Software/OS: WordPress TablePress plugin prior to version 2.4.3. Solution: Update to version 2.4.3 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-9595 Common Vulnerability Exposure (CVE) ID: CVE-2024-45293
Copyright	Copyright (C) 2025 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.