Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-21584 EUVD-2024-19232GHSA-4j5j-2gqc-53xf

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a …

Published Mar 12, 2024 · Updated Mar 13, 2025 · Assigned by jpcert

Description

Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.

Affected products

VendorProductAffectedFixed
Implem Pleasanter 1.3.49.0 and earlier —

References