https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-09T23:17:56.588438+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-107800 fkie_cve-2026-107800 2026-10-09T23:17:56.617614+00:00

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which ToolsUtil.convertURL() passes through unchanged, to execute code in the recipient's browser when opened.

 https://db.gcve.eu/vuln/ghsa-rq35-wp93-7v6g GHSA-rq35-wp93-7v6g 2026-10-09T23:17:56.617807+00:00

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which ToolsUtil.convertURL() passes through unchanged, to execute code in the recipient's browser when opened.