Vulnerabilities

TI-2026-25799 CVE-2026-33402

SAK-52311: Sakai site-manage group titles can contain XSS content

LOW 7

Sakai is a Collaboration and Learning Environment (CLE).

CVSS 4.0LOW 1.3 Network No auth User interaction EPSS 0.00201 Published 2026-03-26 Fixed in 23.5, 25.2 CWE-79

TI-2025-38900 CVE-2025-62710 · GHSA-gr7h-xw4f-wh86

LOW 26

Sakai is a Collaboration and Learning Environment.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.002 Published 2025-10-22 Fixed in 23.5, 25.0 CWE-337

TI-2024-32130 CVE-2024-47876 · GHSA-cx95-q6gx-w4qp

MEDIUM 44

Sakai is a Collaboration and Learning Environment.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0057 Published 2024-10-15 Fixed in 23.3 CWE-285

TI-2019-12135 CVE-2019-16148 · GHSA-q8wc-9xvp-g3c3

LOW 29

Sakai through 12.6 allows XSS via a chat user name.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00832 Published 2019-09-09 No fix listed CWE-79