Shaarli Project Shaarli
5 CVEs affecting Shaarli Project Shaarli. Latest disclosed: 2026-01-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-49469 | Medium | 6.1 | 2023-12-28 | Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function. |
CVE-2013-7351 | Medium | 6.1 | 2020-01-02 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1… |
CVE-2018-5249 | Medium | 6.1 | 2018-01-05 | Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's u… |
CVE-2017-15215 | Medium | 6.1 | 2017-10-11 | Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim… |
CVE-2026-24476 | Medium | 5.4 | 2026-01-26 | Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with `"` prematurely ends the `<input>` tag on the… |