Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-61931 1 Pleasanter 1 Pleasanter 2026-04-15 N/A
Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser.
CVE-2023-45210 1 Pleasanter 1 Pleasanter 2025-05-28 4.3 Medium
Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.
CVE-2023-46688 1 Pleasanter 1 Pleasanter 2024-11-21 6.1 Medium
Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL.
CVE-2023-34439 1 Pleasanter 1 Pleasanter 2024-11-21 5.4 Medium
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.