Tsuyoshi Saito vulnerabilities
Published CVEs affecting Tsuyoshi Saito products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-78238
Medium · 5.4
CWE-79 Aug 28, 2026
Cross-site Scripting (XSS) in Tsuyoshi Saito SOY Gallery
SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.
CVE-2026-78032
Critical · 9.8
CWE-502 Aug 28, 2026
Deserialization of Untrusted Data in Tsuyoshi Saito SOY CMS
SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.
CVE-2026-77838
Medium · 5.4
CWE-79 Aug 28, 2026
Cross-site Scripting (XSS) in Tsuyoshi Saito SOY Calendar
SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.
CVE-2026-73827
Medium · 5.4
CWE-79 Aug 28, 2026
Cross-site Scripting (XSS) in Tsuyoshi Saito SOY Calendar
SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.