BrainStormForce SureDash – Community, Courses & Member Dashboard

• CVE-2026-96870 Medium 6.4 SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter 0.2%
• CVE-2026-102774 Medium 6.4 SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content 0.3%
• CVE-2026-18402 Medium 6.4 SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute 0.3%
• CVE-2026-15821 Medium 6.4 SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%