Skip to content
Sign in
4.8 Medium

CVE-2024-5578 The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which…

Description

The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Affected products and versions

Product Affected versions Fixed in
Table of Contents Plus 2408 earliest → 2408 No fix stated
table_of_contents_plus 2408 earliest → 2408 No fix stated

Other CVEs of Table of Contents Plus

The 2 CVEs of Table of Contents Plus →
CVE-2022-4479 The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes… 5.4 Medium
Track this CVE