https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-10T15:57:38.003546+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-107796 CVE-2026-107796 — Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters 2026-10-10T15:57:38.004728+00:00

Affected: banq jivejdon

Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauthenticated attackers to inject script via unencoded tagID and count parameters. Attackers can craft a link with a script-closing payload in tagID or count, triggered when start exceeds zero, to execute JavaScript in victims' browsers.