CVE-2024-6334

{"id": "CVE-2024-6334", "cveTags": [], "metrics": {}, "published": "2024-07-09T06:15:03.383", "references": [{"url": "https://wpscan.com/vulnerability/6c09083c-6960-4369-8c5c-ad20e34aaa8b/", "source": "contact@wpscan.com"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed."}, {"lang": "es", "value": "El complemento Easy Table of Contents de WordPress anterior a 2.0.67.1 no sanitiza ni escapa a algunas de sus configuraciones, lo que podr\u00eda permitir a usuarios con altos privilegios, como editores, realizar ataques de Cross Site Scripting incluso cuando unfiltered_html no est\u00e1 permitido."}], "lastModified": "2024-07-09T18:19:14.047", "sourceIdentifier": "contact@wpscan.com"}