CVE-2026-5784 is a high-severity stored cross-site scripting (XSS) vulnerability in DivvyDrive versions from 4.8.2.9 up to but not including 4.8.3.2. It arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that execute in users' browsers. This vulnerability impacts confidentiality, integrity, and availability as indicated by its CVSS score of 8.8. No public exploits or known in-the-wild exploitation have been reported. A fixed version exists starting at 4.8.3.2.