๐Ÿ” CVE Alert

CVE-2026-117679

MEDIUM 5.4
CVSS Score
5.4
EPSS Score
0.1%
EPSS Percentile
3th

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when the user accesses a website using the affected product.

Vendor shirasagi project
Product shirasagi
Published Nov 5, 2026
Last Updated Nov 5, 2026
Stay Ahead of the Next One

Get instant alerts for shirasagi project shirasagi

Be the first to know when new medium vulnerabilities affecting shirasagi project shirasagi are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected Versions

SHIRASAGI Project / SHIRASAGI
v1.12.0 โ‰ค v1.21.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
ss-proj.org: https://www.ss-proj.org/support/1743.html jvn.jp: https://jvn.jp/en/jp/JVN55454512/