CVE-2026-6002: Divvydrive Information Technologies Inc Divvydrive

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross-Site Scripting (XSS). This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.

Affected products

• Divvydrive Information Technologies Inc Divvydrive: from 4.8.2.9, before 4.8.3.2 (fixed in 4.8.3.2)

Published 2026-05-07. Last modified 2026-06-17.