SHIRASAGI Project — Vulnerabilities & Security Advisories 1

The SHIRASAGI Project is a Japanese open-source content management system designed for building websites and digital archives. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities, with 10 CVEs recorded to date. The platform's modular architecture has introduced potential risks through insecure file uploads, insufficient input validation, and weak access controls. While no major public security incidents have been widely documented, the consistent discovery of vulnerabilities across different versions highlights ongoing challenges in secure development practices.