CVE-2026-6002
HighSummary
CVE-2026-6002 describes an improper neutralization of Script-Related HTML tags in web pages, leading to basic XSS vulnerabilities in DivvyDrive. The issue affects DivvyDrive versions from 4.8.2.9 before 4.8.3.2.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking. This poses a significant risk to the security of organizational data.
Recommendation
It is recommended to update DivvyDrive to version 4.8.3.2 or later to mitigate this vulnerability. Additionally, conducting a security audit of web applications is advisable.
Other vulnerabilities in DivvyDrive
See all- CVE-2026-6283Medium
A stored cross-site scripting (XSS) vulnerability has been found in DivvyDrive by DivvyDrive Information Technologies Inc. The flaw is caused by improper input neutralization during web page generation, allowing injection of malicious scripts.
- CVE-2026-5220Medium
A stored cross-site scripting (XSS) vulnerability has been found in DivvyDrive by DivvyDrive Information Technologies Inc., due to improper input neutralization during web page generation. The issue affects versions from 4.8.2.23 up to 4.8.3.0.
- CVE-2026-5784High
DivvyDrive has a 'cross-site scripting' (XSS) vulnerability due to improper neutralization of input during web page generation. This issue affects versions from 4.8.2.9 before 4.8.3.2.
Original NVD description (English source)
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross-Site Scripting (XSS). This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.