Priority MEDIUM 63
SHIRASAGI is a Content Management System.
SHIRASAGI Project
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
SHIRASAGI Project records in CISA KEVNo SHIRASAGI Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Shirasagi · all components
TI-2022-21269 CVE-2022-43479 · GHSA-5vx9-xqhh-f79w
Open redirect in SHIRASAGI
Priority MEDIUM 60
Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack.
TI-2023-08683 CVE-2023-22425 · GHSA-7737-vff2-9jq5
Cross-site scripting in SHIRASAGI
Priority MEDIUM 58
Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.
TI-2022-21285 CVE-2022-43499 · GHSA-j2c7-5g87-4vx7
Cross-site scripting in SHIRASAGI
Priority MEDIUM 58
Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
TI-2023-08684 CVE-2023-22427 · GHSA-pffm-c6m3-rc4c
Cross-site scripting in SHIRASAGI
Priority MEDIUM 55
Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker with an administrative privilege to inject an arbitrary script.
TI-2023-20583 CVE-2023-39448 · GHSA-88x4-2pcq-v5mg
Path traversal in SHIRASAGI
Priority MEDIUM 43
Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.
TI-2024-31310 CVE-2024-46898 · GHSA-v7c2-v9g9-2768
Path traversal in SHIRASAGI
Priority MEDIUM 41
SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability.
TI-2019-04298 CVE-2019-6009 · GHSA-cj2c-3w92-rj4x
Open redirect in SHIRASAGI
Priority LOW 31
Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
TI-2020-04576 CVE-2020-5607 · GHSA-c3wx-j258-5j4j
Open redirect in SHIRASAGI
Priority LOW 30
Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
TI-2022-11947 CVE-2022-29485 · GHSA-x774-c85x-jfqf
Cross-site scripting in SHIRASAGI
Priority LOW 29
Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors.
TI-2023-18332 CVE-2023-36492 · GHSA-v49w-8pf7-cffv
Cross-site scripting in SHIRASAGI
Priority LOW 28
Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
TI-2023-19944 CVE-2023-38569 · GHSA-wc5p-jvrj-r2v3
Cross-site scripting in SHIRASAGI
Priority LOW 25
Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.