Read the docs

Toolstack

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Toolstack records in CISA KEV

No Toolstack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sully 4 records HIGH Cyan Backup 2 records MEDIUM Schedule Posts Calendar 2 records LOW Auto Iframe 1 record MEDIUM

Records

2 records in Cyan Backup · all components

TI-2024-08965 CVE-2024-9663 · GHSA-c73f-vp33-fj4h

CYAN Backup < 2.5.3 - Admin+ Stored XSS via Remote Storage Settings

Priority MEDIUM 58

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00318 Published 2025-05-15 Fixed in 2.5.3 CWE-79
TI-2024-08964 CVE-2024-9662 · GHSA-3h8r-96mm-7vvg

CYAN Backup < 2.5.3 - Admin+ Stored XSS via General Settings

Priority MEDIUM 58

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00318 Published 2025-05-15 Fixed in 2.5.3 CWE-79
Open these records in search →