https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:24:43.913117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384885 EUVD-2026-384885 2026-10-09T12:24:43.962357+00:00 EUVD-2026-384885 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107800 fkie_cve-2026-107800 2026-10-09T12:24:43.962395+00:00

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which ToolsUtil.convertURL() passes through unchanged, to execute code in the recipient's browser when opened.

 https://cve.radiocsirt.org/vuln/ghsa-rq35-wp93-7v6g GHSA-rq35-wp93-7v6g 2026-10-09T12:24:43.962429+00:00

Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessage.jsp renders unfiltered message bodies. Attackers can send a short message containing script, which ToolsUtil.convertURL() passes through unchanged, to execute code in the recipient's browser when opened.