CVE-2024-47793mediumCWE-79

CVE-2024-47793: medium-severity vulnerability in Kajitori Co.,Ltd Exment

Published

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.3%
exploitation probability
0.3%top 73% of all CVEs
observed exploitation
nono source reports it
Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), an arbitrary script may be executed on the web browser of the user.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
Kajitori Co.,Ltd · Exment
Related CVEs — Kajitori Co.,Ltd Exment

In the same product, most dangerous first.

CVE-2022-37333—CVE-2022-37333EPSS 1.4%CVE-2022-38089—CVE-2022-38089EPSS 0.9%CVE-2022-38080—CVE-2022-38080EPSS 0.9%CVE-2020-5619—CVE-2020-5619EPSS 0.7%CVE-2020-5620—CVE-2020-5620EPSS 0.6%CVE-2024-46897LOWCVE-2024-46897EPSS 0.4%
References
https://exment.net/docs/#/weakness/20241010https://exment.net/vulnerability-correspondence-version-6-1-5-and-5-0-12-released/https://jvn.jp/en/jp/JVN74538317/