CVE-2023-22425

2023-02-2406:15:11

Google

osv.dev

cross-site scripting

vulnerability

shirasagi

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.9%

JSON

Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.

CPENameOperatorVersion
shirasagieq1.14.0-RC
shirasagieq1.7.0-RC
shirasagieq1.2.1
shirasagieq1.12.2
shirasagieq1.1.0
shirasagieq1.7.0
shirasagieq0.3.0
shirasagieq0.2.0
shirasagieq1.10.0
shirasagieq1.12.2-RC

Name	Operator	Version
shirasagi	eq	1.14.0-RC
shirasagi	eq	1.7.0-RC
shirasagi	eq	1.2.1
shirasagi	eq	1.12.2
shirasagi	eq	1.1.0
shirasagi	eq	1.7.0
shirasagi	eq	0.3.0
shirasagi	eq	0.2.0
shirasagi	eq	1.10.0
shirasagi	eq	1.12.2-RC