Skip to content
OpenAdvisories

Vendor

SHIRASAGI Project

16 known vulnerabilities.

Products

8 results · Clear filters · Feed

  • Medium 5.4

    A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrar…

  • Medium 4.3

    An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorize…

  • Medium 5.4

    A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in…

  • Medium 5.3

    Late-Unicode normalization vulnerability in SHIRASAGI

    SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode normalization. The Unicode character equ…

  • Medium 5.4

    Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remot…

  • Medium 4.8

    Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows …

  • Medium 6.1

    Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users …

  • Medium 5.4

    Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker…