CVE-2024-47793

Name of the Vulnerable Software and Affected Versions Exment versions 6.1.4 and earlier Exment versions 5.0.11 and earlier

Description A stored cross-site scripting issue exists. When accessing the edit screen containing custom columns, such as images or files, an arbitrary script may be executed on the user's web browser.

Recommendations For Exment versions 6.1.4 and earlier, update to a version later than 6.1.4 to resolve the issue. For Exment versions 5.0.11 and earlier, update to a version later than 5.0.11 to resolve the issue. As a temporary workaround, consider restricting access to custom columns of type images or files in the edit screen until a patch is available.