Read the docs

Toc.js Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Toc.js Project records in CISA KEV

No Toc.js Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Toc.js 1 record LOW

Records

1 record

TI-2025-31063 CVE-2025-48923 · GHSA-2vxx-j2xr-8w6v

Toc.js - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-077

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Toc.Js allows Cross-Site Scripting (XSS).This issue affects Toc.Js: from 0.0.0 before 3.2.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00218 Published 2025-06-26 Fixed in 3.2.1 CWE-79
Open these records in search →