CVE-2024-5030

The CVE-2024-5030 affects CM Table Of Contents – WordPress TOC Plugin up to version 1.2.3. It lacks CSRF protection when resetting settings, potentially allowing a logged-in attacker to perform a settings reset via CSRF. Red Hat and Patchstack confirm the issue and indicate the fix is in version ...

CVE-2024-5029

The CM Table Of Contents WordPress plugin (versions before 1.2.4) is vulnerable due to missing CSRF protection when updating settings, and lack of input sanitisation/escaping. The issue could enable a logged-in administrator to inject Stored XSS payloads via a CSRF attack. Remediation: upgrade to...