CVE-2026-66645

MediumCVSS 6.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in the Table of Contents Block in versions up to 1.5.0. A user with Contributor role can inject malicious script.

Risk Assessment

An attacker can steal session data or take over an administrator account, leading to site integrity compromise.

Recommendation

Update the plugin to the latest version that includes the security fix.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.