CVE-2026-107798

Name of the Vulnerable Software and Affected Versions jivejdon versions 595d8d22 through ee67a65e

Description A stored cross-site scripting issue exists in the default-enabled TextStyle filter. The filter inserts unvalidated URLs into anchor href attributes, allowing authenticated attackers to post messages containing javascript: links or quote-breaking URLs. This can lead to the execution of arbitrary JavaScript when other users click or hover over the rendered links.

Recommendations Update jivejdon to a version beyond commit ee67a65e. As a temporary mitigation, consider disabling the TextStyle filter.