Most recent entries from all

fkie_cve-2025-61931

Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser.

GHSA-c6g6-rgwx-76pj

Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser.

jvndb-2025-000093

Pleasanter provided by Implem Inc. contains multiple stored cross-site scripting vulnerabilities listed below. <ul> <li>Stored cross-site scripting vulnerability in Preview for Attachments (CWE-79) - CVE-2025-58070</li> <li>Stored cross-site scripting vulnerability in Body, Description and Comments (CWE-79) - CVE-2025-61931</li> </ul> The following people reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-58070 Reporter: Tomoya Shirahashi of X-Force Red, IBM Japan, Ltd. CVE-2025-61931 Reporter: Kohei Yagyu of Mitsui Bussan Secure Directions, Inc.