[ Vendor · 13 CVEs ]
banq
CVEs affecting banq published in the last 30 days, plus any banq CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107799 | 8 Oct 2026 | CVSS 5.4 | banq jivejdonJivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script by posting unsanitized… | |
| CVE-2026-107800 | 8 Oct 2026 | CVSS 5.4 | banq jivejdonJivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short… | |
| CVE-2026-107801 | 8 Oct 2026 | CVSS 5.4 | banq jivejdonJivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading… | |
| CVE-2026-107828 | 8 Oct 2026 | CVSS 6.5 | banq jivejdonJivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by… | |
| CVE-2026-107829 | 8 Oct 2026 | CVSS 5.9 | banq jivejdonJivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in… | |
| CVE-2026-107830 | 8 Oct 2026 | CVSS 5.3 | banq jivejdonJivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by… | |
| CVE-2026-107831 | 8 Oct 2026 | CVSS 4.3 | banq jivejdonJivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing actions by abusing… | |
| CVE-2026-107792 | 8 Oct 2026 | CVSS 4.3 | banq jivejdonJivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToForumAction that allows… | |
| CVE-2026-107793 | 8 Oct 2026 | CVSS 4.3 | banq jivejdonJivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that allows authenticated users to… | |
| CVE-2026-107796 | 8 Oct 2026 | CVSS 6.1 | banq jivejdonJivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in… | |
| CVE-2026-107797 | 8 Oct 2026 | CVSS 6.1 | banq jivejdonJivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject… | |
| CVE-2026-107798 | 8 Oct 2026 | CVSS 5.4 | banq jivejdonjivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter… | |
| CVE-2025-71428 | 8 Oct 2026 | CVSS 4.9 | banq jivejdonJivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to… |