Skip to content
Threat Feed

Product

Pricing Table

1 brief RSS
critical threat

Supsystic Pricing Table Plugin <= 1.8.7 SQL Injection Vulnerability (CVE-2020-37243)

Supsystic Pricing Table plugin version 1.8.7 contains an SQL injection vulnerability via the 'sidx' GET parameter, enabling unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl action, as well as stored XSS vulnerabilities.

Pricing Table sql-injection xss wordpress plugin
2r 1t 1c