{"metadata": {"vulnerability": "CVE-2026-96870", "count": 15, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-23T18:13:11.319Z", "date_only": false, "value": "2026-09-23T18:13:11.319Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-96870", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T17:09:25Z", "date_only": false, "value": "2026-09-24T17:09:25.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-96870", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-15T18:46:30Z", "date_only": false, "value": "2026-10-15T18:46:30.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-96870", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-16T07:44:03.654Z", "date_only": false, "value": "2026-10-16T07:44:03.654Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-96870", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T07:44:03.654Z", "date_only": false, "value": "2026-10-16T07:44:03.654Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-96870", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T08:15:49.546Z", "date_only": false, "value": "2026-10-16T08:15:49.546976Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117449591925242912", "record": "CVE-2026-96870", "field": "creation_timestamp", "uuid": "f876c115-ddb9-46b1-bafe-56c84b68b972", "content": "CVE-2026-96870 SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter The SureDash \u2013 Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit is triggered when any user hovers over a comment's like counter on a community page, as the plugin's tooltip handler assigns the attacker-controlled data-tooltip-description attribute value directly to innerHTML, re-parsing the browser-decoded entity payload as live HTML.\nhttps://www.cve.org/CVERecord?id=CVE-2026-96870https://www.wordfence.com/threat-intel/vulnerabilities/id/ece14f57-475d-4efc-8daf-52dfdaa12697?source=cvehttps://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/inc/functions/functions.php#L1037https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/assets/js/minified/common.min.js#L58https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/core/routers/misc.php#L647https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/core/routes.php#L121https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/inc/services/router.php#L127https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/inc/functions/functions.php#L1111https://plugins.trac.wordpress.org/changeset?reponame=&new=3721168%40suredash%2Ftags%2F1.12.1&old=3694773%40suredash%2Ftags%2F1.12.0#wordpress #brainstormforce #SureDash\u2013Community,Courses&MemberDashboard#CVE_2026_96870#bot", "url": "https://infosec.exchange/users/cve/statuses/117449591925242912"}, {"timestamp": "2026-10-16T08:17:13Z", "date_only": false, "value": "2026-10-16T08:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RCPX-G8XC-WVVP", "record": "GHSA-RCPX-G8XC-WVVP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T08:17:13.783Z", "date_only": false, "value": "2026-10-16T08:17:13.783", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96870", "record": "FKIE_CVE-2026-96870", "field": "published"}, {"timestamp": "2026-10-16T09:30:30Z", "date_only": false, "value": "2026-10-16T09:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RCPX-G8XC-WVVP", "record": "GHSA-RCPX-G8XC-WVVP", "field": "published"}, {"timestamp": "2026-10-16T09:30:30Z", "date_only": false, "value": "2026-10-16T09:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RCPX-G8XC-WVVP", "record": "GHSA-RCPX-G8XC-WVVP", "field": "modified"}, {"timestamp": "2026-10-16T14:14:41.455Z", "date_only": false, "value": "2026-10-16T14:14:41.455734Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96870", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T14:14:41.455Z", "date_only": false, "value": "2026-10-16T14:14:41.455734Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96870", "record": "FKIE_CVE-2026-96870", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T14:14:58.815Z", "date_only": false, "value": "2026-10-16T14:14:58.815Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-96870", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:14:58.815Z", "date_only": false, "value": "2026-10-16T14:14:58.815Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96870", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:17:37.933Z", "date_only": false, "value": "2026-10-16T15:17:37.933", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96870", "record": "FKIE_CVE-2026-96870", "field": "lastModified"}]}