Ss Proj

ss-proj

12 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-46898 1Ss Proj 1Shirasagi Jun 17, 2026 Oct 15, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing craft...Show more SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.Show less
CVE-2023-41889 1Ss Proj 1Shirasagi Jun 17, 2026 Sep 15, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode n...Show more SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode normalization. The Unicode character equivalent of a character would resurface after the normalization. The fix is initially performing the Unicode normalization and then strip for all whitespaces and then checking for a blank string. This issue has been fixed in version 1.18.0. Show less
CVE-2023-38569 1Ss Proj 1Shirasagi Jun 17, 2026 Sep 5, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
CVE-2023-36492 1Ss Proj 1Shirasagi Jun 17, 2026 Sep 5, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
CVE-2023-39448 1Ss Proj 1Shirasagi Jun 17, 2026 Sep 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.
CVE-2023-22427 1Ss Proj 1Shirasagi Jun 17, 2026 Feb 24, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker with an administrative privilege to inject an arbitrary script.
CVE-2023-22425 1Ss Proj 1Shirasagi Jun 17, 2026 Feb 24, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.
CVE-2022-43499 1Ss Proj 1Shirasagi Jun 17, 2026 Dec 5, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
CVE-2022-43479 1Ss Proj 1Shirasagi Jun 17, 2026 Dec 5, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users to an arbitrary web site and conduct a phishing attack.
CVE-2022-29485 1Ss Proj 1Shirasagi Jun 17, 2026 Jun 14, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2020-5607 1Ss Proj 1Shirasagi Jun 17, 2026 Jul 10, 2020 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2019-6009 1Ss Proj 1Shirasagi Jun 17, 2026 Sep 12, 2019 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.