VendorsShaarli Projectshaarliany version
Vulnerabilities

Shaarli Project Shaarli any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2013-7351
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.
Published 2020-01-02 · Modified
6.1EPSS 0.022
CVE-2018-5249
Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin function in index.php).
Published 2018-01-05 · Modified
6.1EPSS 0.015
CVE-2026-24476
Shaarli vulnerable to stored XSS via Suggested Tags
Published 2026-01-26 · Analyzed
5.4EPSS 0.002