CVE-2022-43499: Ss-Proj Shirasagi

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Affected products

• Ss-Proj Shirasagi: before 1.16.2 (fixed in 1.16.2)

Published 2022-12-05. Last modified 2026-06-17.