CVE-2024-5029

creationtimestamp| type| source ---|---|--- 2024-11-21 06:06:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113519440534872706...

CVE-2024-5029

The CM Table Of Contents WordPress plugin in versions prior to 1.2.4 is vulnerable to Stored Cross-Site Scripting (XSS) via a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating settings, combined with missing sanitization and escaping . An attacker cou...

CVE-2024-5029 CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF

The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-5029 CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF

The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress CM Table Of Contents – WordPress TOC Plugin Plugin < 1.2.4 is vulnerable to Cross Site Scripting (XSS)

Software CM Table Of Contents – WordPress TOC Plugin Type Plugin Vulnerable versions 1.2.4 Fixed in 1.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5029 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7d80877428bb...