1. Home
  2. CVE Database
  3. CVE-2020-9392
HIGH · 7.3

CVE-2020-9392

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoint...

Vulnerability Description

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
SupsysticPricing Table By Supsystic< 1.8.2

Related Weaknesses (CWE)

CWE-276

References

FAQ

What is CVE-2020-9392?

CVE-2020-9392 is a vulnerability with a CVSS score of 7.3 (HIGH). An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoint...

How severe is CVE-2020-9392?

CVE-2020-9392 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9392?

Check the references section above for vendor advisories and patch information. Affected products include: Supsystic Pricing Table By Supsystic.