Toolstack

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Toolstack records in CISA KEV

No Toolstack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sully 4 records HIGH Cyan Backup 2 records MEDIUM Schedule Posts Calendar 2 records LOW Auto Iframe 1 record MEDIUM

Records

1 record in Auto Iframe · all components

TI-2024-09411 CVE-2024-10151 · GHSA-5gvr-6wv7-hpcv

Auto iFrame < 2.0 - Contributor+ XSS via Shortcode

MEDIUM 58

The Auto iFrame WordPress plugin before 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contribu…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00305 Published 2025-01-08 Fixed in 2.0 CWE-79

Open these records in search →

Critical	0
High	3
Medium	6
Low	0
No CVSS	0