Shaarli vulnerabilities
We track 2 vulnerabilities in Shaarli products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Shaarli vulnerabilities
- 8.6 High severity
Shaarli: Improper Neutralization of Input During Web Page Generation
Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in `application/front/controller/visitor/BookmarkListController.php`. The `permalink` handler concatenates the raw `$bookmark->getTitle()` into the `pagetitle` tem
- 7.1 High severity
Shaarli: Improper Neutralization of Input During Web Page Generation
Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the </title> tag to be prematurely closed, leading to a reflected Cross-Site Scripting (XSS) vulne