Medium severity5.4NVD Advisory· Published Dec 5, 2022· Updated Jun 17, 2026

CVE-2022-43499

Description

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ss Proj/Shirasagi
cpe:2.3:a:ss-proj:shirasagi:*:*:*:*:*:*:*:*
Range: <1.16.2
Shirasagi/Shirasagillm-fuzzy
Range: <1.16.2
SHIRASAGI Project/SHIRASAGIv5
Range: versions prior to v1.16.2

Patches

Vulnerability mechanics

References

www.ss-proj.org/support/928.htmlnvdExploitPatchVendor Advisory
jvn.jp/en/jp/JVN86350682/index.htmlnvdThird Party Advisory
www.ss-proj.orgnvdProductVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000