CVE-2025-48923

The Drupal Toc.Js module is vulnerable to Cross-site Scripting (XSS) due to improper input neutralization during web page generation. This issue specifically involves the module's failure to sufficiently sanitize data attributes , which could lead to persistent XSS attacks. The vulnerability affe...