Approved changes feed: RSS · Atom

cpe:2.3:a:web_updates_kmu:custom_tables:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWeb Updates Kmu (cbd68b38-9303-5244-a755-d720eb875bdd)
ProductCustom Tables (258e2b83-71bb-5511-8914-c0d8f9fa943e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-20003 vulnerable 2026-11-03 10:52:08.057359 Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.php
MEDIUM (6.1)
Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php with s=1 and a malicious key value to execute script in victims' browsers and steal cookies. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.
Published: 2026-10-20T20:31:19.033Z
Updated: 2026-10-23T15:25:44.876Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.