Threats tagged 'ghsa-gmpr-6m7m-7m27'

A cross-site scripting (XSS) vulnerability exists in SHIRASAGI that may allow an attacker to execute arbitrary scripts in the web browser of users who visit a website using the affected product. This vulnerability is identified as CVE-2026-81635 and has a CVSS 3.0 base score of 5.4, indicating medium severity. The vulnerability requires low attack complexity and privileges, with user interaction needed. It impacts confidentiality and integrity but not availability. No specific affected versions or patches are currently provided.