Description
The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before outputting them in an admin page, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed, for example in a multisite setup.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Joli Table Of Contents | 2.0.0 – < 2.8.1 | 2.8.1 |
References
- https://wpscan.com/vulnerability/9ebaf1aa-eb8b-4c62-bbd0-07918503fbf1/ exploit vdb-entry technical-description