CVE-2023-22427

2023-02-2406:15:11

Google

osv.dev

shirasagi

cross-site scripting

theme switching

vulnerability

administrative privilege

arbitrary script

software

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker with an administrative privilege to inject an arbitrary script.

CPENameOperatorVersion
shirasagieq1.14.0-RC
shirasagieq1.7.0-RC
shirasagieq1.2.1
shirasagieq1.12.2
shirasagieq1.1.0
shirasagieq1.7.0
shirasagieq0.3.0
shirasagieq0.2.0
shirasagieq1.10.0
shirasagieq1.12.2-RC

Name	Operator	Version
shirasagi	eq	1.14.0-RC
shirasagi	eq	1.7.0-RC
shirasagi	eq	1.2.1
shirasagi	eq	1.12.2
shirasagi	eq	1.1.0
shirasagi	eq	1.7.0
shirasagi	eq	0.3.0
shirasagi	eq	0.2.0
shirasagi	eq	1.10.0
shirasagi	eq	1.12.2-RC