CVE-2020-5620

2020-08-2502:20:22

jpcert

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%

JSON

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file.

CNA Affected

[
  {
    "product": "Exment",
    "vendor": "Kajitori Co.,Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "prior to v3.6.0"
      }
    ]
  }
]

References

exment.net/docs/#/weakness/20200819

jvn.jp/en/jp/JVN88315581/