CVE-2025-48923

The Drupal Toc.Js module (versions 0.0.0 through 3.2.1) is vulnerable to a persistent Cross-Site Scripting (XSS) attack due to improper neutralization of input during web page generation. Specifically, the module fails to sufficiently sanitize data attributes , which allows an attacker to execute...