CVE-2022-43499 Information

Description

Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Reference

https://jvn.jp/en/jp/JVN86350682/index.html https://www.ss-proj.org/support/928.html https://www.ss-proj.org/ https://github.com/shirasagi/shirasagi