Vulnerabilities in banq
13 resultsCVE-2026-107792MEDIUMJivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread MoveEPSS —CVE-2026-107831MEDIUMJivejdon through 5.0 CSRF via GET-based Account and Thread ActionsEPSS —CVE-2026-107797MEDIUMJivejdon through 5.0 Reflected XSS via postThread.jsp to and tag ParametersEPSS —CVE-2026-107796MEDIUMJivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count ParametersEPSS —CVE-2026-107828MEDIUMJivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth LoginEPSS —CVE-2026-107799MEDIUMJivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message RenderingEPSS —CVE-2026-107829HIGHJivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSqlEPSS —CVE-2026-107800MEDIUMJivejdon through 5.0 Stored XSS via Private Short MessagesEPSS —CVE-2026-107830MEDIUMJivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS EndpointEPSS —CVE-2025-71428MEDIUMJivejdon through 5.0 SQL Injection via username in userListActionEPSS —CVE-2026-107801MEDIUMJivejdon through 5.0 Stored XSS via Attachment Upload Content-TypeEPSS —CVE-2026-107793MEDIUMJivejdon through 5.0 IDOR via subSaveAction Subscription DeleteEPSS —CVE-2026-107798MEDIUMJivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering FilterEPSS —