Vulnerabilities

TI-2026-19730 CVE-2026-24476

Shaarli vulnerable to stored XSS via Suggested Tags

MEDIUM 57

Shaarli is a personal bookmarking service.

CVSS 4.0MEDIUM 5.3 Local High privileges User interaction EPSS 0.00175 Published 2026-01-26 Fixed in 0.16.0 CWE-79

TI-2023-27027 CVE-2023-49469 · GHSA-8fxv-xj5w-c8qc

Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote…

LOW 28

Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00531 Published 2023-12-28 No fix listed CWE-79

TI-2013-06015 CVE-2013-7351 · GHSA-r2f8-gmp8-xxp8

Cross-site scripting in Shaarli

LOW 32

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4)…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02212 Published 2020-01-02 Fixed in 53da201 CWE-79

TI-2018-03805 CVE-2018-5249 · GHSA-43f8-j7wq-qhwm

Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3…

LOW 30

Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin fu…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.015 Published 2018-01-05 No fix listed CWE-79

TI-2017-11139 CVE-2017-15215 · GHSA-jgj8-6rfv-fv92

Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to…