CVE-2024-5030 — CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF

CVE-2024-5030

CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF PUBLISHED

Description (CNA)

The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Affected (CNA)

Vendor / product	Versions
Unknown / CM Table Of Contents	affected 0 before 1.2.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/2c2e994c-31bd-4de4-9480-b86f980d4130/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.