Input validation vulnerability in Table of Contents Plus 2309

The Table of Contents Plus plugin for WordPress is vulnerable to a security flaw which could allow malicious users to insert custom code into the website. This only affects WordPress installations which are set up as multi-sites or those on which a certain security setting has been disabled. To exploit this vulnerability, an attacker must have administrator-level access and be able to inject custom code into pages. This code will execute whenever a user views the page, potentially causing harm to the user or the website. The plugin must be updated to version 2302 or above to fix this vulnerability.