CVE-2026-115611: WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress TableOn pluginto a version that resolves this vulnerability.Fixed in 1.0.8
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attack can be performed remotely without authentication and requires a victim to interact with attacker-controlled content, such as following a crafted link or submitting a crafted request.
What is the potential impact if exploitation succeeds?
The vulnerability can allow reflected script execution in a victim's browser. The supplied severity vector indicates low impacts to confidentiality, integrity, and availability, with impact extending beyond the vulnerable component's security authority.
Which TableOn versions are affected?
TableOn versions through 1.0.7 are affected. The available data does not identify a fixed version.