CVE-2024-5573: Easy Table of Contents < 2.0.66 - Admin+ Stored XSS
Published Jun 26, 2024
·Updated
The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed
Affected Software
2 affected components
Magazine3 Easy Table Of Contents Wordpress<2.0.66
Easy Table of Contents Easy Table of Contents<2.0.66
Event History
Jun 26, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-5573?
The severity of CVE-2024-5573 is classified as high due to the potential for Cross-Site Scripting attacks.
2
How do I fix CVE-2024-5573?
To fix CVE-2024-5573, update the Easy Table of Contents plugin to version 2.0.66 or later.
3
Who is affected by CVE-2024-5573?
Users of the Easy Table of Contents WordPress plugin prior to version 2.0.66 are affected by CVE-2024-5573.
4
What kind of attacks can occur due to CVE-2024-5573?
CVE-2024-5573 can allow high privilege users to perform Cross-Site Scripting attacks.
5
What are the initial steps to mitigate CVE-2024-5573?
Initially, restrict user roles who can access the Easy Table of Contents plugin settings until a patch is applied.