Input validation vulnerability in Table of Contents Block 1.0.2

The Table of Contents Block plugin for WordPress has a security issue that makes it vulnerable to a type of attack called Stored Cross-Site Scripting. This can happen in versions 1.0.2 and earlier because the plugin does not properly clean and protect the information it receives and shows. This allows hackers who have contributor-level or higher access to add harmful code to pages that will run whenever someone visits that page.