Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-117679 EUVD-2026-117398GHSA-wcgm-r4r4-7xqc

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's…

Published Nov 5, 2026 · Updated Nov 5, 2026 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when the user accesses a website using the affected product.

Affected products

VendorProductAffectedFixed
SHIRASAGI Project SHIRASAGI v1.12.0 – ≤ v1.21.0 —

References