Medium · 5.4 CVE-2022-43499 EUVD-2022-46497GHSA-j2c7-5g87-4vx7

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrat…

Published Dec 5, 2022 · Updated Apr 24, 2025 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Affected products

Vendor	Product	Affected	Fixed
SHIRASAGI Project	SHIRASAGI	versions prior to v1.16.2	—

References

https://www.ss-proj.org/
https://github.com/shirasagi/shirasagi
https://www.ss-proj.org/support/928.html
https://jvn.jp/en/jp/JVN86350682/index.html