Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows
    remote attackers to inject arbitrary web script or HTML via the scripts parameter to
    media/unit_testing/templates/6776.php. (CVE-2015-6584)

According to its self-reported version number, DataTables is prior to 1.10.10. Therefore, it may be affected by a cross-site scripting vulnerability.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
410295	SCA: security update for datatables, datatables/datatables (GHSA-4mv4-gmmf-q382)	Tenable Cloud Security	SCA Checks	Local	medium
410295	SCA: security update for datatables, datatables/datatables (GHSA-4mv4-gmmf-q382)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
113958	DataTables < 1.10.10 Cross-Site Scripting	Web App Scanning	Component Vulnerability	Version Based	medium

Detections

Analytics

CVE-2015-6584

medium

Tenable Plugins

medium

medium

medium