https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-21584.htmlhttps://patchthecve.com/cve/CVE-2024-21584.htmlWed, 17 Jun 2026 07:09:44 +0000MEDIUM 6.1: Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user. https://patchthecve.com/cve/CVE-2023-46688.htmlhttps://patchthecve.com/cve/CVE-2023-46688.htmlWed, 17 Jun 2026 06:31:21 +0000MEDIUM 6.1: Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL.https://patchthecve.com/cve/CVE-2023-45210.htmlhttps://patchthecve.com/cve/CVE-2023-45210.htmlWed, 17 Jun 2026 06:28:27 +0000MEDIUM 4.3: Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.https://patchthecve.com/cve/CVE-2023-34439.htmlhttps://patchthecve.com/cve/CVE-2023-34439.htmlWed, 17 Jun 2026 06:03:39 +0000MEDIUM 5.4: Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.https://patchthecve.com/cve/CVE-2023-30758.htmlhttps://patchthecve.com/cve/CVE-2023-30758.htmlWed, 17 Jun 2026 05:55:36 +0000MEDIUM 5.4: Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.