Medium · 5.4 CVE-2023-22425 EUVD-2023-26588GHSA-7737-vff2-9jq5

Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated atta…

Published Feb 24, 2023 · Updated Mar 12, 2025 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.

Affected products

Vendor	Product	Affected	Fixed
SHIRASAGI Project	SHIRASAGI	v1.16.2 and earlier versions	—

References

https://www.ss-proj.org/
https://github.com/shirasagi/shirasagi
https://www.ss-proj.org/support/938.html
https://jvn.jp/en/jp/JVN18765463/