CVE-2020-5619

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors...

CVE-2020-5619

Exment v3.6.0 and earlier is vulnerable to cross-site scripting (stored XSS). The vulnerability arises from inadequate validation of client data, allowing remote authenticated attackers to inject and execute arbitrary script or HTML in a user’s browser when viewing affected pages. Public referenc...

CVE-2020-5620

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file...

CVE-2020-5620

Exment prior to v3.6.0 is vulnerable to stored cross-site scripting (via a crafted file or certain inputs). The root cause is improper input sanitization (CWE-79) that allows an arbitrary script to run in a logged-in user’s browser. Affected product: Exment; affected versions: before 3.6.0. Impac...

PT-2020-18589

Name of the Vulnerable Software and Affected Versions Exment versions prior to 3.6.0 Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary script or HTML. Recommendations For versions prior to 3.6.0, update to version 3.6.0 or later to resolve the issu...

CVE-2020-5620: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file...

CVE-2020-5619: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors...

Multiple cross-site scripting vulnerabilities in Exment

Overview Exment provided by Kajitori Co.,Ltd contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in some input fields CWE-79 - CVE-2020-5619 Stored cross-site scripting vulnerability in upload files CWE-79 - CVE-2020-5620 Ryoya Koyama of...

JVN#88315581: Multiple cross-site scripting vulnerabilities in Exment

Exment provided by Kajitori Co.,Ltd contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in some input fields CWE-79 - CVE-2020-5619 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4...