← Database

CVE-2024-47793

MEDIUM CVSS: 5.4 Published: 2024-10-18 Modified: 2026-06-17

Description

Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen containing custom columns (column type: images or files), an arbitrary script may be executed on the web browser of the user.

Affected Platforms

Exceedone Exment

Weakness Type

CWE-79, CWE-79

References