CVE-2023-34439: Pleasanter

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.

Affected products

• Pleasanter Pleasanter: before 1.3.48.0 (fixed in 1.3.48.0)

Published 2023-12-06. Last modified 2026-06-17.