Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

6 matching records.

1. 14
   CVE NVD 39h ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor…

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor - Lite header-footer-elementor allows Stored XSS.This issue affects Ultimate…

   CVSS 6.5 CVE-2026-39739 Brainstorm Force Web platform
2. 9
   CVE NVD 39h ago

   Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions.

   Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions.

   CVSS 5.0 CVE-2026-115604 Brainstorm Force
3. 9
   CVE NVD 2d ago

   Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security…

   Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureForms: from n/a through 2.12.9.

   CVSS 5.3 CVE-2026-116387 Brainstorm Force
4. 9
   CVE NVD 2d ago

   Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security…

   Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.3.

   CVSS 4.3 CVE-2026-115605 Brainstorm Force
5. 9
   CVE NVD 2d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureDash suredash allows…

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureDash suredash allows Stored XSS.This issue affects SureDash: from n/a through 1.12.3.

   CVSS 6.5 CVE-2026-110881 Brainstorm Force
6. 9
   CVE NVD 2d ago

   Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForms sureforms allows Code…

   Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForms sureforms allows Code Injection.This issue affects SureForms: from n/a through 2.12.9.

   CVSS 5.3 CVE-2026-116402 Brainstorm Force

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Brainstorm+Force&limit=100. RSS for this section: feed.xml.