CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-5029 – CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF
https://notcve.org/view.php?id=CVE-2024-5029
The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. • https://wpscan.com/vulnerability/f0f4a33c-9dd2-45ee-82e7-4b8bc2c20094 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-5030 – CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF
https://notcve.org/view.php?id=CVE-2024-5030
The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a CSRF attack The CM Table Of Contents – WordPress TOC Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible for unauthenticated attackers to reset plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. • https://wpscan.com/vulnerability/2c2e994c-31bd-4de4-9480-b86f980d4130 • CWE-352: Cross-Site Request Forgery (CSRF) •