Stored Cross-Site Scripting in SHIRASAGI by SS Project

CVE-2022-43499

What is CVE-2022-43499?

A stored cross-site scripting vulnerability exists in SHIRASAGI versions prior to v1.16.2. This flaw allows a remote authenticated attacker with administrative privileges to inject arbitrary scripts into the system. When executed, these scripts can compromise the security of the affected application, leading to potential data theft, session hijacking, or further exploitation of the application. It is crucial for users of SHIRASAGI to upgrade to version 1.16.2 or later to mitigate this risk.

References