Implem Pleasanter Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Pleasanter, a product by Implem Inc., affecting version 1.4.20.0 and earlier. This vulnerability allows an attacker to execute arbitrary scripts in the web browsers of logged-in users. The issue arises in the Body, Description, and Comments sections, where scripts can be embedded and executed.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary scripts in the web browsers of logged-in users, potentially leading to unauthorized actions being performed on behalf of the user.

Remediation

Users are advised to update Pleasanter to version 1.4.21.0 or later, which addresses this vulnerability. Instructions for updating are available on the Pleasanter website.