Unscored CVE-2020-5619 EUVD-2020-26780GHSA-337r-3rxv-c739

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via u…

Published Aug 25, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Kajitori	Exment	prior to v3.6.0	—

References

https://exment.net/docs/#/weakness/20200819
https://jvn.jp/en/jp/JVN88315581/