Shaarli vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20251
3. 20266

Newest CVEs

• CVE-2026-110225

  Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

  shaarli · Shaarli

  Medium5.1
• CVE-2026-50190

  Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page

  shaarli · Shaarli

  High8.6
• CVE-2026-48821

  Shaarli: DOM-based Cross-Site Scripting (XSS) in Thumbnail Synchronizer

  shaarli · Shaarli

  Medium5.8
• CVE-2026-48823

  Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search

  shaarli · Shaarli

  Medium4.8
• CVE-2026-48822

  Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links

  shaarli · Shaarli

  Medium5.8
• CVE-2026-24476

  Shaarli vulnerable to stored XSS via Suggested Tags

  shaarli · Shaarli

  Medium5.3
• CVE-2025-55291

  Shaarli allows reflected XSS via searchtags parameter

  shaarli · Shaarli

  High7.1
• CVE-2013-7351

  Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the…

  Shaarli · Shaarli

  Medium6.1