Lucene search
+L

9 matches found

EUVD
EUVD
•added 2026/10/09 12:31 a.m.•17 views

EUVD-2026-95306

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.4CVSS6AI score0.0025EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/08 10:17 p.m.•15 views

CVE-2026-107800

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.4CVSS0.0025EPSS
SaveExploits0References5
Mend
Mend
•added 2026/10/08 9:51 p.m.•8 views

CVE-2026-107800

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.4CVSS6AI score0.0025EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/10/08 9:51 p.m.•10 views

CVE-2026-107800 Jivejdon through 5.0 Stored XSS via Private Short Messages

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.1CVSS5.9AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/08 9:51 p.m.•10 views

CVE-2026-107800 Jivejdon through 5.0 Stored XSS via Private Short Messages

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.4CVSS6AI score0.0025EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/08 9:51 p.m.•19 views

CVE-2026-107800

Jivejdon versions through 5.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is that receiveshortmessage.jsp renders unfiltered message bodies, while the ToolsUtil.convertURL() function fails to strip out malicious scripts. This allows authenticated attackers to inject...

5.4CVSS6AI score0.0025EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/08 9:51 p.m.•47 views

CVE-2026-107800 Jivejdon through 5.0 Stored XSS via Private Short Messages

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.4CVSS0.0025EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•11 views

PT-2026-108260

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.4CVSS6AI score0.0025EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•9 views

CVE-2026-107800: Improper Neutralization of Input During Web Page Generation

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

5.4CVSS6AI score0.0025EPSS
SaveExploits0References2
Rows per page
Query Builder