Lucene search
K

7 matches found

OSV
OSV
added 2026/01/26 11:16 p.m.0 views

UBUNTU-CVE-2026-24476

Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with " prematurely ends the tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue...

5.4CVSS5.9AI score0.00042EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/26 10:26 p.m.2 views

CVE-2026-24476

Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with " prematurely ends the tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue...

5.3CVSS5.9AI score0.00042EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-17031

Malware in sbrugna...

6.1CVSS6.3AI score0.0031EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/08/18 5:6 p.m.3 views

CVE-2025-55291 Shaarli allows reflected XSS via searchtags parameter

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.9AI score0.00034EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/18 12:0 a.m.5 views

Shaarli 安全漏洞

Shaarli is a suite of website cloning tools. A security vulnerability exists in Shaarli versions prior to 0.15.0, which stems from an input string that is not properly cleaned and is susceptible to reflective cross-site scripting attacks...

7.1CVSS6.1AI score0.00034EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/12/28 6:15 a.m.3 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.8AI score0.00163EPSS
Exploits1References3
OSV
OSV
added 2023/12/28 6:15 a.m.2 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.4AI score
Exploits0References2
Rows per page
Query Builder