CVE-2024-21584

CVE-2024-21584 affects Pleasanter 1.3.49.0 and earlier, with a cross-site scripting (CWE-79) vulnerability. An attacker can lure a user to access the product via a specially crafted URL and perform a specific operation, potentially causing arbitrary script execution in the user’s browser. The iss...

Pleasanter Cross-Site Scripting Vulnerability

Pleasanter is a free OSS no-code/low-code development tool from Pleasanter. A security vulnerability exists in Pleasanter 1.3.49.0 and prior versions, which stems from the presence of a cross-site scripting XSS vulnerability that can be exploited by an attacker to lure a user into visiting the...