CVE-2015-6584
DataTables < 1.10.8 - Cross-Site Scripting via Scripts Parameter
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.
References (4)
Core 4
Core References
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/133555/DataTables-1.10.8-Cross-Site-Scripting.html
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/536437/100/0/threaded
Exploit x_refsource_misc
https://www.netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables/
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2015/Sep/37
Scores
EPSS
0.0268
EPSS Percentile
84.2%
Details
CWE
CWE-79
Status
published
Products (3)
datatables/datatables
0 - 1.10.10Packagist
npm/datatables
0 - 1.10.10npm
sprymedia/datatables
< 1.10.8
Published
Sep 11, 2015
Tracked Since
Feb 18, 2026