Skip to content
OpenAdvisories

Package · Debian

shaarli

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-50190

    Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page

    Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in `application/front/controller/visitor/BookmarkListController.php`. The `permalink` handler concatenates the raw `$bookmark->getTitle()` into the `pagetitle` te…

    shaarli Shaarli shaarli shaarli Debian Ubuntu
  • High 7.1
    CVE-2025-55291

    Shaarli allows reflected XSS via searchtags parameter

    Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the </title> tag to be prematurely closed, leading to a reflected Cross-Site Scripting (XSS) vuln…

    shaarli Shaarli shaarli shaarli Debian Ubuntu