SHIRASAGI Project vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20201
3. 20223
4. 20235
5. 20241
6. 20264

Newest CVEs

• CVE-2026-118869

  An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the…

  SHIRASAGI Project · SHIRASAGI

  High8.7
• CVE-2026-117679

  A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when…

  SHIRASAGI Project · SHIRASAGI

  Medium5.1
• CVE-2026-82582

  An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the…

  SHIRASAGI Project · SHIRASAGI

  Medium5.3
• CVE-2026-81635

  A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses…

  SHIRASAGI Project · SHIRASAGI

  Medium5.1
• CVE-2024-46898

  SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited,…

  SHIRASAGI Project · SHIRASAGI

  High8.6
• CVE-2023-38569

  Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary script on the web…

  SHIRASAGI Project · SHIRASAGI

  Medium5.4
• CVE-2023-36492

  Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web…

  SHIRASAGI Project · SHIRASAGI

  Medium6.1
• CVE-2023-39448

  Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting…

  SHIRASAGI Project · SHIRASAGI

  High8.8
• CVE-2023-22427

  Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker with an administrative…

  SHIRASAGI Project · SHIRASAGI

  Medium4.8
• CVE-2023-22425

  Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated attacker to inject an…

  SHIRASAGI Project · SHIRASAGI

  Medium5.4