{"id":"CVE-2026-107801","title":"Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading attachments with an attacker-supplied Content-Type","summary":"Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading attachments with an attacker-supplied Content-Type. Attackers can upload a file declared as …","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"published":"2026-10-08","updated":"2026-10-14","sourceUpdated":"2026-10-14T02:16:58.617","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-107801","references":[{"url":"https://github.com/banq/jivejdon","label":"disclosure@vulncheck.com"},{"url":"https://github.com/banq/jivejdon/blob/ee67a65e65228644a71c8317d7e34deea50f95ef/src/main/java/com/jdon/jivejdon/domain/model/message/upload/UploadHelper.java#L84-L91","label":"disclosure@vulncheck.com"},{"url":"https://github.com/banq/jivejdon/blob/ee67a65e65228644a71c8317d7e34deea50f95ef/src/main/java/com/jdon/jivejdon/presentation/action/UploadShowAction.java#L135-L142","label":"disclosure@vulncheck.com"},{"url":"https://github.com/banq/jivejdon/issues/28","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/jivejdon-through-5.0-stored-xss-via-attachment-upload-content-type","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"epss":0.00215,"epssPercentile":0.11822,"ingestedAt":"2026-10-08T23:16:47.392Z","vendor":"banq","product":"jivejdon","affected":["jivejdon <= 5.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-14T01:28:13.570772Z"},"slug":"CVE-2026-107801","body":"## Overview\n\nJivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading attachments with an attacker-supplied Content-Type. Attackers can upload a file declared as text/html, which UploadShowAction serves inline, and share its link to run JavaScript on the application's origin for viewing users.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}