Description
A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted input into the msgContent parameter.
Medium · 6.1
CVE-2026-36761
EUVD-2026-26394GHSA-v5cr-c793-7mvp
A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitra…
Published Apr 30, 2026 · Updated Apr 30, 2026 · Assigned by mitre