{"metadata": {"vulnerability": "CVE-2026-102982", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-29T20:46:08.333Z", "date_only": false, "value": "2026-09-29T20:46:08.333Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-102982", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T15:32:10.754Z", "date_only": false, "value": "2026-10-13T15:32:10.754Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102982", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T15:32:10.754Z", "date_only": false, "value": "2026-10-13T15:32:10.754Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-102982", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T15:38:13.768Z", "date_only": false, "value": "2026-10-13T15:38:13.768213Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434344603828875", "record": "CVE-2026-102982", "field": "creation_timestamp", "uuid": "d24879bf-b9d5-4dff-913d-1e733ad71202", "content": "CVE-2026-102982 Plane: XSS in work item comments Plane is an open-source project management tool. Prior to 1.4.0, the plane comments fail to sanitize unsafe URL schemes stored in comment_html. A project member can store a crafted link in a comment, and attacker-controlled script executes in the browser context of another user who selects the link. This issue is fixed in version 1.4.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102982https://github.com/makeplane/plane/security/advisories/GHSA-6qrq-f73q-r67jhttps://github.com/makeplane/plane/pull/9287https://github.com/makeplane/plane/commit/0d58adb69d859fc94c43b9d68fadd77e810d5ed1https://github.com/makeplane/plane/releases/tag/v1.4.0#makeplane #plane#CVE_2026_102982#bot", "url": "https://infosec.exchange/users/cve/statuses/117434344603828875"}, {"timestamp": "2026-10-13T16:17:10.293Z", "date_only": false, "value": "2026-10-13T16:17:10.293", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102982", "record": "FKIE_CVE-2026-102982", "field": "published"}, {"timestamp": "2026-10-13T16:21:05.614Z", "date_only": false, "value": "2026-10-13T16:21:05.614509Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102982", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T16:21:05.614Z", "date_only": false, "value": "2026-10-13T16:21:05.614509Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102982", "record": "FKIE_CVE-2026-102982", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:21:12.046Z", "date_only": false, "value": "2026-10-13T16:21:12.046Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-102982", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:21:12.046Z", "date_only": false, "value": "2026-10-13T16:21:12.046Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102982", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:14.683Z", "date_only": false, "value": "2026-10-13T17:17:14.683", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102982", "record": "FKIE_CVE-2026-102982", "field": "lastModified"}]}