sprymedia vulnerabilities

Products

• datatables 3

Latest sprymedia CVEs

Newest publication first

1. CVE-2025-11031 DataTables examples.php path traversal

   Published 2025-09-26

   Medium·CVSS 6.9 EPSS 0.85%

   A flaw has been found in DataTables up to 1.10.13. The affected element is an unknown function of the file /examples/resources/examples.php. This manipulation of the argument src causes path traversal. It is possible to initiate the attack remotely. The exploit has been published...

2. CVE-2021-36713 Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function _fnCreateCookie. NOTE: 1.9.2 is a ver...

   Published 2023-03-06

   Medium·CVSS 6.1 EPSS 0.79%

   Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function _fnCreateCookie. NOTE: 1.9.2 is a version from 2012.

3. CVE-2015-6584 DataTable Vulnerable to Cross-Site Scripting

   Published 2015-09-11

   Medium·CVSS 4.3 EPSS 2.7% Public exploit

   Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.