Medium severity6.1NVD Advisory· Published Oct 8, 2026

CVE-2026-107797

Description

Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string literals to execute arbitrary JavaScript in the victim's session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Banq/Jivejdonllm-fuzzy
Range: <=5.0
Jivejdon/jivejdonllm-fuzzy
Range: <=5.0

Patches

Vulnerability mechanics

References

github.com/banq/jivejdon/blob/ee67a65e65228644a71c8317d7e34deea50f95ef/application/message/postThread.jspnvd
github.com/banq/jivejdon/issues/28nvd
www.vulncheck.com/advisories/jivejdon-through-5.0-reflected-xss-via-postthread-jsp-to-and-tag-parametersnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000