Description
Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), an arbitrary script may be executed on the web browser of the user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kajitori | Exment | v6.1.4 and earlier, v5.0.11 and earlier | — |