Mmastodon TechnologyCybersecurity first seen 6 d ago, last 6 d ago, peak #6

Cross-site scripting vulnerability disclosed in SureCart plugin

Original: 🚨 EUVD-2026-105137 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: SureCart 🏢 Vendor: Brainstorm Force 📅 Published: 2026-10-20 |

A medium-severity cross-site scripting vulnerability, tracked as EUVD-2026-105137, has been published for SureCart, the e-commerce plugin by vendor Brainstorm Force. The flaw, scored 6.5 out of 10 under CVSS v3.1, stems from improper neutralization of input during web page generation. It was disclosed on 20 October 2026 and updated the following day, prompting site owners to check for patched versions.

Why now: Security researchers and WordPress store operators are flagging the newly published vulnerability so affected sites can patch quickly.

SureCartBrainstorm ForceEUVD-2026-105137

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 6 d ago to 6 d ago.

Evidence

• 🚨 EUVD-2026-105137 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: SureCart 🏢 Vendor: Brainstorm Force 📅 Published: 2026-10-20 | Updated: 2026-10-21 📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3110231