CVE-2026-110881: WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureDash suredash allows Stored XSS.This issue affects SureDash: from n/a through 1.12.3.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SureDash pluginto a version that resolves this vulnerability.Fixed in 1.12.4
Event History
Frequently Asked Questions
What level of access and interaction are required to exploit this issue?
The CVSS vector indicates that an attacker needs low-level privileges and requires user interaction. The attack can be performed over the network with low complexity.
What is the potential impact if exploitation succeeds?
The issue is a stored XSS vulnerability. The supplied severity vector indicates potential low impact to confidentiality, integrity, and availability, with an impact scope that can extend beyond the vulnerable component.
Which SureDash versions are affected?
SureDash versions through 1.12.3 are affected. The available data does not identify a fixed version.