Lucene search
+L

96 matches found

CNNVD
CNNVD
added 2026/01/26 12:0 a.m.10 views

Shaarli cross-site scripting vulnerabilities

Shaarli is a set of website cloning tools developed by the Shaarli Community. Versions of Shaarli prior to 0.16.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of malicious tags, which could lead to cross-site scripting attacks...

5.4CVSS5.6AI score0.00147EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-6675

Malware in sbrugna...

6.1CVSS6.2AI score0.01485EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-17031

Malware in sbrugna...

6.1CVSS6.3AI score0.015EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2013-7123

Malware in sbrugna...

6.1CVSS6.2AI score0.02212EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-28587

Malicious code in bioql PyPI...

7.1CVSS6.3AI score0.00232EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-55291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allow...

7.1CVSS5.8AI score0.00232EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/20 5:33 p.m.13 views

CVE-2025-55291

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.4AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/18 5:15 p.m.14 views

CVE-2025-55291

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS0.00232EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/18 5:15 p.m.8 views

DEBIAN-CVE-2025-55291

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.2AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/18 5:15 p.m.20 views

UBUNTU-CVE-2025-55291

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.8AI score0.00232EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/08/18 5:6 p.m.5 views

CVE-2025-55291 Shaarli allows reflected XSS via searchtags parameter

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.9AI score0.00232EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/18 5:6 p.m.16 views

CVE-2025-55291 Shaarli allows reflected XSS via searchtags parameter

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS0.00232EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/18 5:6 p.m.39 views

CVE-2025-55291

Shaarli (bookmark manager) is affected by a reflected XSS in the cloud tag page due to improper sanitization of input, enabling premature closing of . The issue is confirmed to be fixed in version 0.15.0. Affected components: Shaarli input handling on the cloud tag page; root cause: inadequate in...

7.1CVSS5.9AI score0.00232EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/18 5:6 p.m.9 views

CVE-2025-55291 Shaarli allows reflected XSS via searchtags parameter

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.7AI score0.00232EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/08/18 5:6 p.m.28 views

CVE-2025-55291

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.2AI score0.00232EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/18 12:0 a.m.12 views

PT-2025-33676

Name of the Vulnerable Software and Affected Versions: Shaarli versions prior to 0.15.0 Description: Shaarli is a minimalist bookmark manager and link sharing service. Input strings in the cloud tag page are not properly sanitized, allowing premature closure of the tag. This results in a reflecte...

7.1CVSS5.4AI score0.00232EPSS
SaveExploits0References17
CNNVD
CNNVD
added 2025/08/18 12:0 a.m.27 views

Shaarli 安全漏洞

Shaarli is a suite of website cloning tools. A security vulnerability exists in Shaarli versions prior to 0.15.0, which stems from an input string that is not properly cleaned and is susceptible to reflective cross-site scripting attacks...

7.1CVSS6.1AI score0.00232EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 5:6 a.m.7 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.5AI score0.00535EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 10:54 a.m.7 views

CVE-2017-15215

Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can for example take over the admin session or change global settings or add/delete links. It is also...

6.1CVSS6.3AI score0.01485EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/28 6:15 a.m.6 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.8AI score0.00535EPSS
SaveExploits1References3
Rows per page
Query Builder