{"metadata": {"vulnerability": "cve-2026-103524", "count": 10, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-09-30T19:05:23.379Z", "date_only": false, "value": "2026-09-30T19:05:23.379Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-103524", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T14:54:16.912Z", "date_only": false, "value": "2026-10-12T14:54:16.912Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-103524", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T14:54:16.912Z", "date_only": false, "value": "2026-10-12T14:54:16.912Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-103524", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-12T14:54:16.912Z", "date_only": false, "value": "2026-10-12T14:54:16.912Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "cve-2026-103524", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T15:01:05.180Z", "date_only": false, "value": "2026-10-12T15:01:05.180653Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428536253519534", "record": "CVE-2026-103524", "field": "creation_timestamp", "uuid": "3f1e3a93-ceb4-4177-a079-bc1360644ce5", "content": "CVE-2026-103524 CVE-2026-103524 Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface. User-supplied input is stored without sufficient output encoding or sanitization and is later rendered in the administrator interface and/or the web store's product pages, allowing arbitrary JavaScript execution when the affected pages are viewed. The vulnerability affects multiple administrative functions including category creation and product creation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103524https://kb.cert.org/vuls/id/162329#Thelia#CVE_2026_103524#bot", "url": "https://infosec.exchange/users/cve/statuses/117428536253519534"}, {"timestamp": "2026-10-12T15:17:05Z", "date_only": false, "value": "2026-10-12T15:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2749-M95V-4RFR", "record": "GHSA-2749-M95V-4RFR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T15:17:05.970Z", "date_only": false, "value": "2026-10-12T15:17:05.970", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103524", "record": "FKIE_CVE-2026-103524", "field": "published"}, {"timestamp": "2026-10-12T15:32:19Z", "date_only": false, "value": "2026-10-12T15:32:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2749-M95V-4RFR", "record": "GHSA-2749-M95V-4RFR", "field": "published"}, {"timestamp": "2026-10-12T15:32:19Z", "date_only": false, "value": "2026-10-12T15:32:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2749-M95V-4RFR", "record": "GHSA-2749-M95V-4RFR", "field": "modified"}, {"timestamp": "2026-10-13T13:51:00.250Z", "date_only": false, "value": "2026-10-13T13:51:00.250", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103524", "record": "FKIE_CVE-2026-103524", "field": "lastModified"}]}