Approved changes feed: RSS · Atom

cpe:2.3:a:magazine3:easy_table_of_contents:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorMagazine3 (7e4cb157-d360-562d-a694-e813be0c8ddb)
ProductEasy Table Of Contents (1a15c713-32f9-5a20-8dcb-1c636490688d)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7082 vulnerable 2026-06-08 06:58:21.199681 easy-table-of-contents < 2.0.68 - Editor+ Stored XSS
The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.
Published: 2024-08-06T06:00:07.251Z
Updated: 2024-10-27T16:18:02.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6334 vulnerable 2026-06-08 06:58:18.647098 Easy Table of Contents < 2.0.67 - Editor+ Stored XSS
The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
Published: 2024-07-09T06:00:05.147Z
Updated: 2024-11-21T14:57:54.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5573 vulnerable 2026-06-08 06:56:16.594556 Easy Table of Contents < 2.0.66 - Admin+ Stored XSS
The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Published: 2024-06-26T06:00:05.425Z
Updated: 2024-08-01T21:18:06.816Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.