CVE-2026-5784
HighSummary
DivvyDrive has a 'cross-site scripting' (XSS) vulnerability due to improper neutralization of input during web page generation. This issue affects versions from 4.8.2.9 before 4.8.3.2.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to update DivvyDrive to version 4.8.3.2 or later to mitigate this vulnerability.
Other vulnerabilities in DivvyDrive
See all- CVE-2026-6283Medium
A stored cross-site scripting (XSS) vulnerability has been found in DivvyDrive by DivvyDrive Information Technologies Inc. The flaw is caused by improper input neutralization during web page generation, allowing injection of malicious scripts.
- CVE-2026-5220Medium
A stored cross-site scripting (XSS) vulnerability has been found in DivvyDrive by DivvyDrive Information Technologies Inc., due to improper input neutralization during web page generation. The issue affects versions from 4.8.2.23 up to 4.8.3.0.
- CVE-2026-6002High
CVE-2026-6002 describes an improper neutralization of Script-Related HTML tags in web pages, leading to basic XSS vulnerabilities in DivvyDrive. The issue affects DivvyDrive versions from 4.8.2.9 before 4.8.3.2.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.