CVE-2026-107799

Name of the Vulnerable Software and Affected Versions Jivejdon versions prior to 5.1

Description Authenticated attackers can perform a stored cross-site scripting attack by posting unsanitized forum message bodies. The issue occurs because message bodies are rendered by the 'messageListBody.jsp' endpoint using filter="false" and non-escaping default filters, which allows scripts to execute in the browser of any user who views the affected thread.

Recommendations Update Jivejdon to a version newer than 5.0.