CVE-2025-55291 Shaarli allows reflected XSS via searchtags parameter

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

PT-2025-33676

Name of the Vulnerable Software and Affected Versions: Shaarli versions prior to 0.15.0 Description: Shaarli is a minimalist bookmark manager and link sharing service. Input strings in the cloud tag page are not properly sanitized, allowing premature closure of the tag. This results in a reflecte...

Shaarli 安全漏洞

Shaarli is a suite of website cloning tools. A security vulnerability exists in Shaarli versions prior to 0.15.0, which stems from an input string that is not properly cleaned and is susceptible to reflective cross-site scripting attacks...

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

CVE-2017-15215

Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can for example take over the admin session or change global settings or add/delete links. It is also...

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

DEBIAN-CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

Cross site scripting

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

UBUNTU-CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

Shaarli Cross-Site Scripting Vulnerability

Shaarli is a suite of website cloning tools. A cross-site scripting vulnerability exists in Shaarli version v0.12.2, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the search tag function...

CVE-2023-49469

CVE-2023-49469 is a disclosed Reflected XSS in Shaarli v0.12.2. The vulnerability allows remote execution of arbitrary code via the search tag function. Affected product: Shaarli (v0.12.2); underlying issue: reflected XSS. Base CVSS score is 6.1 (MEDIUM) with network attack vector, no privileges ...

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

Shaarli SQL注入漏洞

Shaarli is a suite of website cloning tools. A SQL injection vulnerability exists in Shaarlier prior to version 1.2.2, which stems from the createTag function in the app/src/main/java/com/dimtion/shaarlier/TagsSource.java file of the Tag Handler, which may result in an SQL injection...

CVE-2013-7351

Multiple cross-site scripting XSS vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the 1 showRSS, 2 showATOM, or 3 showDailyRSS function; a 4 file name to the importFile function; or 5 vectors related to bookmarks...

CVE-2013-7351

Multiple cross-site scripting XSS vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the 1 showRSS, 2 showATOM, or 3 showDailyRSS function; a 4 file name to the importFile function; or 5 vectors related to bookmarks...

DEBIAN-CVE-2013-7351

Multiple cross-site scripting XSS vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the 1 showRSS, 2 showATOM, or 3 showDailyRSS function; a 4 file name to the importFile function; or 5 vectors related to bookmarks...