CVE-2026-84931

The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before outputting it inside an HTML element's attribute, allowing users with the Author role and above to inject arbitrary HTML attributes and JavaScript that execute in the browser of...

CVE-2025-15694

The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before outputting them in an admin page, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability ...

EUVD-2026-71872

The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before outputting it inside an HTML element's attribute, allowing users with the Author role and above to inject arbitrary HTML attributes and JavaScript that execute in the browser of...

CVE-2025-15694

Joli Table Of Contents WordPress plugin (versions 2.0.0–2.8.0 ) contains a Stored XSS vulnerability caused by insufficient sanitisation and escaping of plugin settings before output on an admin page. This allows high-privilege users (Admin+) to inject scripts that persist even when the unfiltered...

WordPress Joli Table Of Contents plugin 2.0.0-2.8.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Joli Table Of Contents versions 2.0.0-2.8.0...

PT-2026-86356

🚨 CVE-2026-84931 The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before outputting it inside an HTML element's attribute, allowing users with the Author role and above to inject arbitrary HTML attributes and JavaScript that execute ...

WordPress Joli Table Of Contents plugin <= 2.6.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Joli Table Of Contents versions = 2.6.0...

EUVD-2022-49602

Malicious code in bioql PyPI...

CVE-2022-46820

Cross-Site Request Forgery CSRF vulnerability in WPJoli Joli Table Of Contents plugin = 1.3.9 versions...

WordPress Joli Table Of Contents Plugin < 2.0.10 is vulnerable to Cross Site Scripting (XSS)

Software Joli Table Of Contents Type Plugin Vulnerable versions 2.0.10 Fixed in 2.0.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dbdc6cbc5b8e Credits Rafie Muhammad Patchstack...

CVE-2022-46820

Cross-Site Request Forgery CSRF vulnerability in WPJoli Joli Table Of Contents plugin = 1.3.9 versions...

CVE-2022-46820 WordPress Joli Table Of Contents Plugin <= 1.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPJoli Joli Table Of Contents plugin = 1.3.9 versions...

CVE-2022-46820

CVE-2022-46820 affects the WPJoli Joli Table Of Contents WordPress plugin, specifically versions

CVE-2022-46820 WordPress Joli Table Of Contents Plugin <= 1.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPJoli Joli Table Of Contents plugin = 1.3.9 versions...

PT-2023-15064 · WordPress · Wpjoli Joli Table Of Contents

Name of the Vulnerable Software and Affected Versions: WPJoli Joli Table Of Contents plugin versions prior to 1.3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...

WordPress plugin Joli Table Of Contents 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Joli Table Of Contents Plugin <= 1.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Joli Table Of Contents Type Plugin Vulnerable versions = 1.3.9 Fixed in 2.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46820 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5d76be68ea78 Credits minhtuanact...

WordPress Joli Table Of Contents plugin <= 1.3.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Joli Table Of Contents plugin versions = 1.3.8. Solution Update the WordPress Joli Table Of Contents plugin to the latest available version at least 1.3.9...

WordPress Joli Table Of Contents plugin <= 1.3.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Joli Table Of Contents plugin versions = 1.3.8. Solution Update the WordPress Joli Table Of Contents plugin to the latest available version at least 1.3.9...