Advisories · Technology
brainstormforce SureDash – Community, Courses & Member Dashboard.
Every CVE that names brainstormforce SureDash – Community, Courses & Member Dashboard among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
- brainstormforce SureDash – Community, Courses & Member Dashboard
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content
- brainstormforce SureDash – Community, Courses & Member Dashboard
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute
- brainstormforce SureDash – Community, Courses & Member Dashboard
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- brainstormforce SureDash – Community, Courses & Member Dashboard
- Cross-site scripting (XSS)