Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-24662 EUVD-2026-30504GHSA-cq4p-2r8m-83m6

Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a file con…

Published May 15, 2026 · Updated May 15, 2026 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a file containing malicious contents is uploaded, an arbitrary script may be executed on a user's web browser when viewing the administration page showing the information of the file.

Affected products

VendorProductAffectedFixed
Fujitsu Japan Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier —

References