Lucene search
MitreCVELIST:CVE-2017-15215HistoryOct 03, 2022 - 4:23 p.m.
CVE-2017-15215
2022-10-0316:23:35
mitre
www.cve.org
shaarli v0.9.1
reflected xss
unauthenticated attacker
javascript injection
admin session takeover
global settings change
0.001 Low
EPSS
Percentile
46.8%
Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can (for example) take over the admin session or change global settings or add/delete links. It is also possible to execute JavaScript against unauthenticated users.
Related
nvd
nvd
CVE-2017-15215
2017-10-11 01:32:55
debiancve
debiancve
CVE-2017-15215
2022-10-03 16:23:35
ubuntucve
ubuntucve
CVE-2017-15215
2017-10-11 00:00:00
cve
cve
CVE-2017-15215
2022-10-03 16:23:35
osv
osv
CVE-2017-15215
2017-10-11 01:32:55
prion
prion
Cross site scripting
2017-10-11 01:32:00