Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-96648 · Microsoft / collected KEV context

cve-program · CVE-2026-96648

• https://www.wordfence.com/threat-intel/vulnerabilities/id/12316a14-57e9-4e00-ad6b-04df3b169d73?source=cve
• https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L349
• https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/views/shortcode.twig#L151
• https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Controller.php#L529
• https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Tables/Model/Tables.php#L1028
• https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/BaseController.php#L94
• https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/tags/1.15.0/src/SupsysticTables/Core/Module.php#L103
• https://plugins.trac.wordpress.org/browser/data-tables-generator-by-supsystic/
• https://plugins.trac.wordpress.org/changeset/3721225/data-tables-generator-by-supsystic/trunk/src/SupsysticTables/Tables/Model/Tables.php

No related operational record is retained in the current change model.