Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-5220 EUVD-2026-41008GHSA-rr2x-7r28-45fw

Stored XSS in DivvyDrive Information Technologies' DivvyDrive

Published Jul 1, 2026 · Updated Jul 1, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS.

This issue affects DivvyDrive: from 4.8.2.23 before v.4.8.3.1.

Affected products

VendorProductAffectedFixed
DivvyDrive Information Technologies DivvyDrive 4.8.2.23 – < v.4.8.3.1 v.4.8.3.1

References