High · 7.1 CVE-2025-31385 EUVD-2025-10642GHSA-299q-fv2g-6cv8

WordPress Site Table of Contents plugin <= 0.3 - CSRF to Stored XSS vulnerability

Published Apr 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: intelcaprep Product: Site Table of Contents

Description

Cross-Site Request Forgery (CSRF) vulnerability in intelcaprep Site Table of Contents site-table-of-contents allows Stored XSS.This issue affects Site Table of Contents: from n/a through <= 0.3.

Affected products

Vendor	Product	Affected	Fixed
intelcaprep	Site Table of Contents	≤ 0.3	—

References

https://patchstack.com/database/Wordpress/Plugin/site-table-of-contents/vulnerability/wordpress-site-table-of-contents-plugin-0-3-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry