Input validation vulnerability in Easy Table of Contents 2.0.67.1

The Easy Table of Contents plugin for WordPress has a security vulnerability that allows hackers to insert harmful code into a page. This can happen on any version up to 2.0.67.1 because the plugin does not properly filter and sanitize input and output. This means that attackers with editor privileges or higher can add dangerous code to a page, which will run whenever a user visits that page. This only affects websites with multiple sub-sites or those that have disabled the “unfiltered_html” setting.