Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: magazine3 Component: Easy Table Of Contents Clear all filters
TI-2024-06561 CVE-2024-7082 · GHSA-fhmm-33rx-rqfp

easy-table-of-contents < 2.0.68 - Editor+ Stored XSS

Priority LOW 27

The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00407 Published 2024-08-06 Fixed in 2.0.68 CWE-79
TI-2024-05878 CVE-2024-6334 · GHSA-f4jx-rpw7-5p2c

Easy Table of Contents < 2.0.67 - Editor+ Stored XSS

Priority LOW 27

The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2024-07-09 Fixed in 2.0.67.1 CWE-79
TI-2024-05177 CVE-2024-5573 · GHSA-2347-3mgh-xw2g

Easy Table of Contents < 2.0.66 - Admin+ Stored XSS

Priority MEDIUM 60

The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilt…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00329 Published 2024-06-26 Fixed in 2.0.66 CWE-79