← All advisories

Medium severity5.4NVD Advisory· Published Jun 1, 2023· Updated Jun 17, 2026

CVE-2023-30758

CVE-2023-30758

Description

Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Pleasanter/Pleasanter2 versions
cpe:2.3:a:pleasanter:pleasanter:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pleasanter:pleasanter:*:*:*:*:*:*:*:*range: <1.3.38.1
- (no CPE)range: <=1.3.38.1
Implem Inc./Pleasanterllm-fuzzy2 versions
<=1.3.38.1+ 1 more
- (no CPE)range: <=1.3.38.1
- (no CPE)range: 1.3.38.1 and earlier

Patches

Vulnerability mechanics

References

3

pleasanter.org/archives/vulnerability-update-202305nvdPatchVendor Advisory
github.com/Implem/Implem.Pleasanter/issues/474nvdExploitIssue TrackingPatchThird Party Advisory
jvn.jp/en/jp/JVN62111727/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.