Stored Cross-Site Scripting Vulnerability in Jivejdon
CVE-2026-107798

5.1MEDIUM

Key Information:

Vendor

Banq

Status
Jivejdon
Vendor
CVE Published:
8 October 2026

What is CVE-2026-107798?

The Jivejdon product is susceptible to a stored cross-site scripting (XSS) vulnerability due to the default-enabled TextStyle filter. This flaw allows authenticated attackers to inject malicious JavaScript into messages by submitting link attributes that are not properly validated. Consequently, when other users click or hover over these links, arbitrary JavaScript can be executed in their browsers, leading to potential session hijacking or defacement. Users of Jivejdon should promptly update to the secure version and review permissions to mitigate risks associated with this vulnerability.

Affected Version(s)

jivejdon 595d8d227fcdedf6f3b73540dd9f5d12dab399fe

References

https://github.com/banq/jivejdon/issues/28
issue-tracking
https://github.com/banq/jivejdon
product
https://github.com/banq/jivejdon/blob/ee67a65e65228644a71...
technical-description

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ikram-4
.