SureCart (N/a Through 4.9.5) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/surecart-n/a-through-4.9.5/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 16:09:14 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgBrainstorm Force SureCart: Stored Cross-Site Scripting (CVE-2026-112221)https://feed.craftedsignal.io/briefs/2026-10-21-surecart-xss/Wed, 21 Oct 2026 16:09:14 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-21-surecart-xss/A stored cross-site scripting (XSS) vulnerability in the Brainstorm Force SureCart plugin (versions 4.9.5 and earlier) due to improper neutralization of input during web page generation.<p>The Brainstorm Force SureCart plugin for WordPress, in versions from n/a through 4.9.5, contains a vulnerability involving the improper neutralization of input during web page generation, which allows for Stored XSS.</p> highadvisory