Description
The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Easy Table of Contents | < 2.0.68 | 2.0.68 |
References
- https://wpscan.com/vulnerability/8f30e685-00fa-4dbb-b516-2d14e4b13697/ exploit vdb-entry technical-description