CVE-2024-6334

The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-6334

CVE-2024-6334 affects the Easy Table of Contents WordPress plugin. Vulnerable up to version 2.0.67.0 (before 2.0.67.1) where certain settings aren’t sanitised/escaped, enabling a stored XSS for high-privilege users (e.g., editors) even when unfiltered_html is disallowed. Impact per connected docs...

CVE-2024-6334 Easy Table of Contents < 2.0.67 - Editor+ Stored XSS

The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

WordPress Easy Table of Contents Plugin < 2.0.67 is vulnerable to Cross Site Scripting (XSS)

Software Easy Table of Contents Type Plugin Vulnerable versions 2.0.67 Fixed in 2.0.67.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6334 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cb1a71a30d2b Credits Dmitrii Ignatye...

WordPress Easy Table of Contents plugin < 2.0.66 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Easy Table of Contents versions 2.0.66...

CVE-2024-5573

The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-5573

CVE-2024-5573 affects the Easy Table of Contents WordPress plugin. The vulnerability arises because the plugin does not sanitise/escape certain settings, enabling stored Cross‑Site Scripting (XSS) by high‑privilege users (e.g., editors) even when unfiltered_html is disallowed. Public references (...

WordPress Easy Table of Contents Plugin <= 2.0.45.2 is vulnerable to Broken Access Control

Software Easy Table of Contents Type Plugin Vulnerable versions = 2.0.45.2 Fixed in 2.0.46 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25469 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8f5ee9912e34 Credits Rafshanzani Suhada...

WordPress plugin Easy Table cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2017-20108

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20108

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

Cross site scripting

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20108 Easy Table Plugin options-general.php cross site scripting

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20108 Easy Table Plugin options-general.php cross site scripting

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20108

CVE-2017-20108 affects Easy Table Plugin 1.6 for WordPress. The vulnerability exists in /wordpress/wp-admin/options-general.php where input manipulation (notably including the string "&gt;) can trigger a cross-site scripting (XSS) vulnerability. Exploitation is possible remotely. Documents consis...

WordPress plugin Easy Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Easy Table cross-site scripting vulnerability

WordPress is a free and open source blogging software and content management system on the platform of PHP and MySQL.Easy Table is a plugin specially designed for managing tables. A cross-site scripting vulnerability exists in the WordPress plugin Easy Table, where the program fails to filter...

WordPress Easy Table 1.6 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================= MGC ALERT 2017-001 - Original release date: Feb 07, 2017 - Last revised: Feb 12, 2017 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score...

Easy Table <= 1.6 - Authenticated Stored Cross-Site Scripting (XSS)

The Easy Table WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

WordPress Easy Table 1.6 Cross Site Scripting

============================================= MGC ALERT 2017-001 - Original release date: Feb 07, 2017 - Last revised: Feb 12, 2017 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score ============================================= I. VULNERABILITY -------------------------...