{"id":"CVE-2026-117679","title":"A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when the user accesses a website using the affected product.","summary":"A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when the user accesses a website using the affected product.","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-79"],"vendor":"SHIRASAGI Project","product":"SHIRASAGI","affected":["SHIRASAGI >= v1.12.0 <= v1.21.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T16:41:52.737299Z"},"published":"2026-11-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T19:05:18.259Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-117679","references":[{"url":"https://www.ss-proj.org/support/1743.html"},{"url":"https://jvn.jp/en/jp/JVN55454512/"}],"tags":["cve.org"],"epss":0.00139,"epssPercentile":0.0329,"ingestedAt":"2026-11-05T22:38:31.499Z","slug":"CVE-2026-117679","body":"## Overview\n\nA cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when the user accesses a website using the affected product.\n\n## Affected\n\n- `SHIRASAGI >= v1.12.0 <= v1.21.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}