WordPress Table of Contents Plus <= 2408 Stored XSS Vulnerability (CVE-2024-5578)

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Plugin Name: Table of Contents Plus <= 2408 - Editor+ Stored XSS 2. Description: The plugin does not sanitize or escape certain settings, allowing high-privilege users (such as editors) to execute cross-site scripting attacks when unfiltered HTML is disabled. 3. Proof of Concept: - Step 1: Create a new post and add two more headings. - Step 2: Go to the plugin settings, set "Show when" to 2, check "Auto insert for the following content types", and change "Hi". - Step 3: Save the settings and view the post created in Step 1. 4. Affected Plugin: table-of-contents-plus 5. References: - CVE: CVE-2024-5578 - URL: https://research.cleantalk.org/cve-2024-5578/ 6. Classification: - Type: XSS - OWASP Top 10: A7: Cross-Site Scripting (XSS) - CWE: CWE-79 - CVSS: 3.5 (Low) 7. Additional Information: - Original Researcher: Dmitrii Ignatyev - Submitter: Dmitrii Ignatyev - Submitter Website: https://www.linkedin.com/in/dmitriy-ignatyev-8a9189267/ - Verified: Yes - WPVDB ID: 641e4fc3-4214-4c2e-8245-15e9dcdd37b4 - Published Date: 2024-10-15 - Added Date: 2024-10-15 - Last Updated: 2024-10-15 - Related Vulnerabilities: - Starter Templates - Elementor, WordPress & Beaver Builder Templates < 4.2.2 - Contributor+ Stored Cross-Site Scripting - Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS - Custom Website Data 1.0 - wp-admin/admin.php ref Parameter XSS - Simple Business Manager <= 4.6.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting - CarePlus <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Table of Contents Plus <= 2408 Stored XSS Vulnerability (CVE-2024-5578)

More from this source