medium5.4
CVE-2024-47793
Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier.
Impact
Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), an arbitrary script may be executed on the web browser of the user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exceedone | Exment | before 5.0.11 from 6.0.0 before 6.1.4 |