CVE-2024-7082: MAGAZINE3 Easy Table Of Contents

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.

Affected products

• MAGAZINE3 Easy Table Of Contents: before 2.0.68 (fixed in 2.0.68)

Published 2024-08-06. Last modified 2026-06-17.