Priority MEDIUM 57
Shaarli is a personal bookmarking service.
Shaarli Project
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Shaarli Project records in CISA KEVNo Shaarli Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2013-06015 CVE-2013-7351 · GHSA-r2f8-gmp8-xxp8
Cross-site scripting in Shaarli
Priority LOW 32
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4)…
TI-2018-03805 CVE-2018-5249 · GHSA-43f8-j7wq-qhwm
Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3…
Priority LOW 30
Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin fu…
TI-2017-11139 CVE-2017-15215 · GHSA-jgj8-6rfv-fv92
Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to…
Priority LOW 30
Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php.
TI-2023-27027 CVE-2023-49469 · GHSA-8fxv-xj5w-c8qc
Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote…
Priority LOW 28
Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function.