Site Building with Toolset
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Site Building with Toolset records in CISA KEVNo Site Building with Toolset vulnerabilities are listed in CISA KEV.
Priority LOW 39
Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00426 · Published 2026-06-26 · No fix listed CWE-639
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-08-24 · No fix listed CWE-79
Open these records in search →