CVE-2024-6334

The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-6334 Easy Table of Contents < 2.0.67 - Editor+ Stored XSS

The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-6334

The Easy Table of Contents WordPress plugin affects versions prior to 2.0.67.1 due to a lack of sanitization and escaping for certain settings. This flaw enables high-privilege users, such as editors , to perform Cross-Site Scripting (XSS) attacks, even in environments where unfiltered_html is di...