CVE-2026-6002 is a Cross-Site Scripting (XSS) vulnerability in DivvyDrive versions from 4.8.2.9 up to but not including 4.8.3.2. It arises from improper neutralization of script-related HTML tags, allowing attackers to inject malicious scripts. The vulnerability has a high severity with a CVSS score of 8.8, indicating significant potential impact on confidentiality, integrity, and availability.