EUVD-2026-95306

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

CVE-2026-107800 Jivejdon through 5.0 Stored XSS via Private Short Messages

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which...

CVE-2026-107800

Jivejdon versions through 5.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is that receiveshortmessage.jsp renders unfiltered message bodies, while the ToolsUtil.convertURL() function fails to strip out malicious scripts. This allows authenticated attackers to inject...