CVE-2024-5573

The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-5573

CVE-2024-5573 affects the Easy Table of Contents WordPress plugin. The vulnerability arises because the plugin does not sanitise/escape certain settings, enabling stored Cross‑Site Scripting (XSS) by high‑privilege users (e.g., editors) even when unfiltered_html is disallowed. Public references (...

WordPress Easy Table of Contents Plugin <= 2.0.45.2 is vulnerable to Broken Access Control

Software Easy Table of Contents Type Plugin Vulnerable versions = 2.0.45.2 Fixed in 2.0.46 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25469 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8f5ee9912e34 Credits Rafshanzani Suhada...