{"metadata": {"vulnerability": "CVE-2026-93659", "count": 21, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-30T11:17:42Z", "date_only": false, "value": "2026-08-30T11:17:42.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-93659", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-18T13:30:26.287Z", "date_only": false, "value": "2026-09-18T13:30:26.287Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-93659", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-18T14:23:21.563Z", "date_only": false, "value": "2026-09-18T14:23:21.563Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93659", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-18T15:17:22Z", "date_only": false, "value": "2026-09-18T15:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9RR2-PVRH-G3PM", "record": "GHSA-9RR2-PVRH-G3PM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-18T15:17:22.510Z", "date_only": false, "value": "2026-09-18T15:17:22.510", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93659", "record": "FKIE_CVE-2026-93659", "field": "published"}, {"timestamp": "2026-09-18T15:32:20Z", "date_only": false, "value": "2026-09-18T15:32:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9RR2-PVRH-G3PM", "record": "GHSA-9RR2-PVRH-G3PM", "field": "published"}, {"timestamp": "2026-09-18T15:32:21Z", "date_only": false, "value": "2026-09-18T15:32:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9RR2-PVRH-G3PM", "record": "GHSA-9RR2-PVRH-G3PM", "field": "modified"}, {"timestamp": "2026-09-18T16:07:57.956Z", "date_only": false, "value": "2026-09-18T16:07:57.956809Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskhbzkah2b", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "1c945c67-8340-46ba-b7cd-d0f605d73eff", "content": "\ud83d\udea8 CVE-2026-93659 \u2014 CVSS 9.3 CRITICAL\n\nConcrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93659\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskhbzkah2b"}, {"timestamp": "2026-09-18T17:59:43.487Z", "date_only": false, "value": "2026-09-18T17:59:43.487671Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93659", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T17:59:43.487Z", "date_only": false, "value": "2026-09-18T17:59:43.487671Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93659", "record": "FKIE_CVE-2026-93659", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T17:59:51.217Z", "date_only": false, "value": "2026-09-18T17:59:51.217Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93659", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T21:00:06.910Z", "date_only": false, "value": "2026-09-18T21:00:06.910943Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt2rp43ei2g", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "0a5e615f-7818-4700-9cee-3c639865d4a7", "content": "CVE-2026-93659 - community_store\nThe Community Store add\u2011on for Concrete CMS (versions before 2.7.8) shows customer\u2011entered billing information without cleaning it first. This lets an unauthenticated attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#communitystore #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt2rp43ei2g"}, {"timestamp": "2026-09-19T14:00:05.553Z", "date_only": false, "value": "2026-09-19T14:00:05.553383Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102763", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "3001c6cf-ecc6-41e8-9f07-4c6bb20c7e8b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93659-writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a prince325\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 12:59:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStored XSS in Concrete CMS Community Store leads to admin dashboard takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102763"}, {"timestamp": "2026-09-20T00:00:07.319Z", "date_only": false, "value": "2026-09-20T00:00:07.319403Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102763", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "ad4c3f0a-2699-4b70-8a87-08a545104725", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93659-writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a prince325\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 12:59:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStored XSS in Concrete CMS Community Store leads to admin dashboard takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102763"}, {"timestamp": "2026-09-22T07:00:10.540Z", "date_only": false, "value": "2026-09-22T07:00:10.540397Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iGFXEv4gfpyl7BqTNjPDtEQ8FnW4XXXDcMjUEMDNy6ylN_I", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "79270098-a6ed-4397-8071-328fb13a9bf3"}, {"timestamp": "2026-09-22T07:00:10.785Z", "date_only": false, "value": "2026-09-22T07:00:10.785202Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ZCdi5I9p-Xc5z40_zki51FeiOFO_jVkkH_bDL_VUI_TujH0", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "88f526cf-fbe3-4703-8df7-faca1c77d7c0"}, {"timestamp": "2026-09-23T00:00:11.824Z", "date_only": false, "value": "2026-09-23T00:00:11.824969Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZCdi5I9p-Xc5z40_zki51FeiOFO_jVkkH_bDL_VUI_TujH0", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "1a2b20f0-9063-4ca7-a41c-bb8f17a18a49"}, {"timestamp": "2026-09-23T00:00:12Z", "date_only": false, "value": "2026-09-23T00:00:12.000328Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iGFXEv4gfpyl7BqTNjPDtEQ8FnW4XXXDcMjUEMDNy6ylN_I", "record": "CVE-2026-93659", "field": "creation_timestamp", "uuid": "9954bbb6-4757-4a1b-ab5a-c6d812beecec"}, {"timestamp": "2026-09-28T15:19:53.808Z", "date_only": false, "value": "2026-09-28T15:19:53.808Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-93659", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-28T15:19:53.808Z", "date_only": false, "value": "2026-09-28T15:19:53.808Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-93659", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-28T16:17:17.830Z", "date_only": false, "value": "2026-09-28T16:17:17.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93659", "record": "FKIE_CVE-2026-93659", "field": "lastModified"}]}