Vendor
SHIRASAGI Project
16 known vulnerabilities.
Products
8 results · Clear filters · Feed
-
Medium 5.4
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrar…
-
Medium 4.3
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorize…
-
Medium 5.4
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in…
-
Medium 5.3
Late-Unicode normalization vulnerability in SHIRASAGI
SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode normalization. The Unicode character equ…
-
Medium 5.4
Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remot…
-
Medium 4.8
Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows …
-
Medium 6.1
Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users …
-
Medium 5.4
Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker…