CVE-2024-47793
18.10.2024, 06:15
Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), an arbitrary script may be executed on the web browser of the user.
Vendor | Product | Version |
---|---|---|
exceedone | exment | 𝑥 < 5.0.11 |
exceedone | exment | 6.0.0 ≤ 𝑥 < 6.1.4 |
𝑥
= Vulnerable software versions