Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Advanced Custom Fields: Table Field 1.1.13

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 13, 2016

The Advanced Custom Fields: Table Field plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack allows someone to inject malicious web scripts into pages that are viewed by other users. Versions of the plugin before 1.1.13 did not have sufficient safeguards in place to protect against this type of attack. As a result, anyone with access to the plugin could inject malicious code into web pages.

Detected in:

Advanced Custom Fields: Table Field fixed vulnerable versions: >= * < 1.1.13
Table Field Add-on for ACF and SCF fixed vulnerable versions:
Table Field Add-on for SCF and ACF fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.