Is CVE-2026-117679 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-117679 being exploited in the wild.

How severe is CVE-2026-117679?

Medium severity, with a CVSS score of 5.4, published 5 November 2026.

Which products and versions are affected?

SHIRASAGI Project SHIRASAGI v1.12.0 to v1.21.0.

Is there a fix for CVE-2026-117679?

Yes: fixed in SHIRASAGI v1.21.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-117679 attacked?

It is attacked over the network.

Am I affected by CVE-2026-117679?

Check whether you run SHIRASAGI Project SHIRASAGI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-117679: SHIRASAGI cross-site scripting in advertisement pages

CVE-2026-117679 · Severity: medium · CVSS 5.4 · Published 2026-11-05

SHIRASAGI is a Japanese open-source content management system used to build government and corporate websites. An authenticated administrator with ad management permissions can inject malicious scripts into advertisement attributes or link display settings. When a visitor clicks the affected advertisement on the public site, arbitrary JavaScript executes in their browser, potentially stealing cookies, session tokens, or redirecting users to malicious sites.

Technologies: SHIRASAGI Project SHIRASAGI. Vendors: SHIRASAGI Project.

Quick answers

Is CVE-2026-117679 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-117679 being exploited in the wild.
How severe is CVE-2026-117679?: Medium severity, with a CVSS score of 5.4, published 5 November 2026.
Which products and versions are affected?: SHIRASAGI Project SHIRASAGI v1.12.0 to v1.21.0.
Is there a fix for CVE-2026-117679?: Yes: fixed in SHIRASAGI v1.21.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-117679 attacked?: It is attacked over the network.
Am I affected by CVE-2026-117679?: Check whether you run SHIRASAGI Project SHIRASAGI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: SHIRASAGI v1.21.1

Technical details

Cross-site scripting (CWE-79) in advertisement page attributes and link display fields allows authenticated users with ad management privileges to inject JavaScript via insufficient input sanitization. The attack requires user interaction (clicking the advertisement) and affects SHIRASAGI v1.12.0 through v1.21.0. A fix is available in v1.21.1.

Affected products

SHIRASAGI Project SHIRASAGI v1.12.0 to v1.21.0

Timeline

2026-11-05: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.