Threats affecting pkg:npm/toc.js

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2025-48923Drupal Toc.js · Cross-site Scripting Medium6.1EPSS 0.2%2025-06-26CVE Database V5CVE-2025-48923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Toc.Js allows Cross-Site Scripting (XSS).This issue affects Toc.Js: from 0.0.0 before 3.2.1. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-06-26

Page 1 of 1