CVE-2026-108495mediumCWE-79

CVE-2026-108495: falha de média gravidade em Brainstorm Force SureForms

WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability

Publicada em

Seguir esta CVE+ Monitorar SureForms

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.1%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureForms sureforms allows Stored XSS.This issue affects SureForms: from n/a through 2.12.7.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Brainstorm Force · SureForms
CVEs relacionadas — Brainstorm Force SureForms

No mesmo produto, das mais perigosas para as menos.

CVE-2026-85308MEDIUMWordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-116402MEDIUMWordPress SureForms plugin <= 2.12.9 - Content Injection vulnerabilityEPSS 0.3%CVE-2026-116387MEDIUMWordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-120842MEDIUMWordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerabilityEPSS —