Stored Cross-Site Scripting Vulnerability in SHIRASAGI by SS Proj

CVE-2023-38569

What is CVE-2023-38569?

A stored cross-site scripting vulnerability exists in SHIRASAGI prior to version 1.18.0. This flaw enables remote authenticated attackers to inject arbitrary scripts that could be executed in the web browsers of users during their login sessions. The exploitation of this vulnerability could allow attackers to steal sensitive information or manipulate the behavior of the web application, compromising user security and trust.

References