CVE-2024-1333

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p34

Published

Mar 18, 2024 (Mar 18, 2024)

Modified

Jun 17, 2026

Description

The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape some of its Pricing Table options before outputting them back in a page/post where the related shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks

Vendors: wpdarko
Products: responsive pricing table
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.