CVE-2025-58070: XSS
Published Oct 24, 2025
·Updated
Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's web browser.
Affected Software
1 affected component
Implem Pleasanter
Event History
Oct 24, 2025
CVE Published
via MITRE·05:17 AM
Data Sourced
via MITRE·05:17 AM
DescriptionSeverity
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-58070?
The severity of CVE-2025-58070 is rated as medium with a score of 6.1.
2
What type of vulnerability is CVE-2025-58070?
CVE-2025-58070 is a stored cross-site scripting (XSS) vulnerability.
3
How does CVE-2025-58070 affect users?
CVE-2025-58070 allows an attacker to execute arbitrary scripts in a logged-in user's web browser.
4
How do I fix CVE-2025-58070?
To fix CVE-2025-58070, it is recommended to update Pleasanter to its latest version where the vulnerability has been patched.
5
What applications are affected by CVE-2025-58070?
CVE-2025-58070 specifically affects Pleasanter, particularly the feature for previewing attachments.