Skip to content
OpenAdvisories
Unscored CVE-2017-10889 EUVD-2017-2529GHSA-wfj4-9275-fh6p

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.

Published Nov 17, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: TablePress Product: TablePress

Description

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.

Affected products

VendorProductAffectedFixed
tablepress.org TablePress prior to version 1.8.1 —

References