https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-46898.htmlhttps://patchthecve.com/cve/CVE-2024-46898.htmlWed, 17 Jun 2026 07:56:10 +0000HIGH 7.5: SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.https://patchthecve.com/cve/CVE-2023-41889.htmlhttps://patchthecve.com/cve/CVE-2023-41889.htmlWed, 17 Jun 2026 06:23:00 +0000MEDIUM 5.3: SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode normalization. The Unicode character equivalent of a character would resurface afhttps://patchthecve.com/cve/CVE-2023-38569.htmlhttps://patchthecve.com/cve/CVE-2023-38569.htmlWed, 17 Jun 2026 06:10:44 +0000MEDIUM 5.4: Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.https://patchthecve.com/cve/CVE-2023-36492.htmlhttps://patchthecve.com/cve/CVE-2023-36492.htmlWed, 17 Jun 2026 06:06:23 +0000MEDIUM 6.1: Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.https://patchthecve.com/cve/CVE-2023-39448.htmlhttps://patchthecve.com/cve/CVE-2023-39448.htmlWed, 17 Jun 2026 06:12:21 +0000HIGH 8.8: Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.