CVE-2025-58070 — Implem Inc. / Pleasanter

CVE-2025-58070

Implem Inc. / Pleasanter PUBLISHED

Description (CNA)

Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser.

Affected (CNA)

Vendor / product	Versions
Implem Inc. / Pleasanter	affected 1.4.20.0 and earlier versions

CWE

CWE-79

References

https://pleasanter.org/archives/vulnerability-update-20251024
https://jvn.jp/en/jp/JVN20611740/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.