Vendors / toocheke Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now toocheke records in CISA KEV No toocheke vulnerabilities are listed in CISA KEV.
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows DOM-Based XSS.This issue affects Toocheke Companion: from n/a th…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00171 · Published 2026-03-13 · No fix listed CWE-79
Priority LOW 28
The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.10 via the 'series_bg_color' post meta field.
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00331 · Published 2026-08-16 · No fix listed CWE-79
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows Stored XSS.This issue affects Toocheke Companion: from n/a throu…
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00242 · Published 2025-01-22 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 0 3 0 0
