Medium severity5.4NVD Advisory· Published Aug 25, 2020· Updated Jun 17, 2026

CVE-2020-5620

Description

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Exment/Exmentllm-fuzzy
Range: <3.6.0
Kajitori Co.,Ltd/Exmentv5
Range: prior to v3.6.0

Patches

Vulnerability mechanics

References

exment.net/docs/nvdVendor Advisory
jvn.jp/en/jp/JVN88315581/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000