CVE-2021-46782

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Unknown	Pricing Table by Supsystic	>= 1.9.5, < 1.9.5

References

https://wpscan.com/vulnerability/39e69487-aa53-4b78-a422-12515a6449bfExploit, Third Party Advisory
https://wpscan.com/vulnerability/39e69487-aa53-4b78-a422-12515a6449bfExploit, Third Party Advisory

Timeline

Published: Apr 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-467846.5In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when pro CVE-2021-467855.3The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.CVE-2021-467869.8The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerabili CVE-2021-467877.5The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system applica CVE-2021-467887.5Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-u CVE-2021-467897.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.CVE-2021-467907.8ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is CVE-2021-467915.5Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binar CVE-2021-467925.9Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing th CVE-2021-467947.5Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox CVE-2021-467954.7A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory CVE-2021-468115.3HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card