CVE-2024-7082 — easy-table-of-contents < 2.0.68 - Editor+ Stored XSS

CVE-2024-7082

easy-table-of-contents < 2.0.68 - Editor+ Stored XSS PUBLISHED

Description (CNA)

The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Easy Table of Contents	affected 0 before 2.0.68

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/8f30e685-00fa-4dbb-b516-2d14e4b13697/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.