Skip to content
OpenAdvisories
High · 8.8 CVE-2026-6002 EUVD-2026-28360GHSA-pmh8-hhp9-qxxf

HTML Injection in DivvyDrive Information Technologies' DivvyDrive

Published May 7, 2026 · Updated May 7, 2026 · Assigned by TR-CERT

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross-Site Scripting (XSS).

This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.

Affected products

VendorProductAffectedFixed
DivvyDrive Information Technologies DivvyDrive 4.8.2.9 – < 4.8.3.2 4.8.3.2

References