CVE-2026-96648

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-96648", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-09-23T14:41:42.517Z", "datePublished": "2026-10-10T04:26:42.279Z", "dateUpdated": "2026-10-11T12:23:59.552Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-10-10T04:26:42.279Z"}, "affected": [{"vendor": "supsysticcom", "product": "Data Tables Generator by Supsystic", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.15.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable by Subscriber-level users when an administrator has added their role to the plugin's 'access_roles' setting, which is a documented and explicitly supported plugin feature that grants lower-privileged users access to the dtgs_nonce required to reach the vulnerable updateRows action handler."}], "title": "Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/12316a14-57e9-4e00-ad6b-04df3b169d73?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L349"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/views/shortcode.twig#L151"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Controller.php#L529"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L1028"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/BaseController.php#L94"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/Module.php#L103"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/"}, {"url": "https://plugins.trac.wordpress.org/changeset/3721225/data-tables-generator-by-supsystic/trunk/src/SupsysticTables/Tables/Model/Tables.php"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "braintx"}], "timeline": [{"time": "2026-09-23T14:56:47.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-10-09T15:29:34.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-96648", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-11T12:18:23.510490Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-11T12:23:59.552Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-96648", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-11T12:18:23.510490Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-11T12:18:24.222Z"}}], "cna": {"title": "Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action", "credits": [{"lang": "en", "type": "finder", "value": "braintx"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "supsysticcom", "product": "Data Tables Generator by Supsystic", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.15.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-09-23T14:56:47.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-10-09T15:29:34.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/12316a14-57e9-4e00-ad6b-04df3b169d73?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L349"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/views/shortcode.twig#L151"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Controller.php#L529"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L1028"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/BaseController.php#L94"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/Module.php#L103"}, {"url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/"}, {"url": "https://plugins.trac.wordpress.org/changeset/3721225/data-tables-generator-by-supsystic/trunk/src/SupsysticTables/Tables/Model/Tables.php"}], "descriptions": [{"lang": "en", "value": "The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable by Subscriber-level users when an administrator has added their role to the plugin's 'access_roles' setting, which is a documented and explicitly supported plugin feature that grants lower-privileged users access to the dtgs_nonce required to reach the vulnerable updateRows action handler."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-10-10T04:26:42.279Z"}}}, "cveMetadata": {"cveId": "CVE-2026-96648", "state": "PUBLISHED", "dateUpdated": "2026-10-11T12:23:59.552Z", "dateReserved": "2026-09-23T14:41:42.517Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-10-10T04:26:42.279Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Data Tables Generator by Supsystic", "vendor": "supsysticcom", "versions": [{"lessThanOrEqual": "1.15.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable by Subscriber-level users when an administrator has added their role to the plugin's 'access_roles' setting, which is a documented and explicitly supported plugin feature that grants lower-privileged users access to the dtgs_nonce required to reach the vulnerable updateRows action handler."}], "id": "CVE-2026-96648", "lastModified": "2026-10-13T13:30:21.620", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-96648", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-11T12:18:23.510490Z", "version": "2.0.3"}}]}, "published": "2026-10-10T05:16:40.533", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/BaseController.php#L94"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/Module.php#L103"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Controller.php#L529"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L1028"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L349"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/views/shortcode.twig#L151"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3721225/data-tables-generator-by-supsystic/trunk/src/SupsysticTables/Tables/Model/Tables.php"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/12316a14-57e9-4e00-ad6b-04df3b169d73?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"created": "2026-10-10T05:30:09.843954+00:00", "updated": "2026-10-10T05:30:09.843959+00:00", "vendors": []}