Patchstack reports crosssite scripting vulnerability | WordPress.org

brad100
(@brad100)

8 months, 1 week ago

Patchstack is reporting a crosssite scripting vulnerability affecting version 2.0.4 and earlier. Are you aware of this and is a security patch in the works?

Thanks

Brad

Viewing 2 replies - 1 through 2 (of 2 total)

jmsharp
(@jmsharp)

8 months, 1 week ago

https://patchstack.com/database/vulnerability/wp-table-builder/wordpress-wp-table-builder-plugin-2-0-4-cross-site-scripting-xss-vulnerability?_a_id=473

We are also interested in when a patch will be available for this.

Plugin Contributor Saad
(@protibimbok)

8 months ago

Hello,
v2.0.5 has been released with improved XSS protection.
Even though don’t know for sure if Patchstack is reporting about those exact ones, we will continue to improve and coordinate with them to fix the ones they are reporting.
Thank you

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Patchstack reports crosssite scripting vulnerability’ is closed to new replies.

3 replies
3 participants
Last reply from: Saad
Last activity: 8 months ago
Status: not resolved