Approved changes feed: RSS · Atom
cpe:2.3:a:shaarli_project:shaarli:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shaarli Project (144e4e96-be93-5139-a05a-d6f1f4382385) |
|---|---|
| Product | Shaarli (ea845c07-baa1-5818-9305-657b6543282c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/shaarli |
purl2cpe | 2026-06-01 10:14:01.941706 |
pkg:docker/shaarli/shaarli |
purl2cpe | 2026-06-01 10:14:01.941709 |
pkg:github/sebsauvage/shaarli |
purl2cpe | 2026-06-01 10:14:01.941710 |
pkg:github/shaarli/shaarli |
purl2cpe | 2026-06-01 10:14:01.941712 |
pkg:sourceforge/shaarli |
purl2cpe | 2026-06-01 10:14:01.941714 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24476 |
vulnerable | 2026-06-08 07:51:17.742674 |
Shaarli vulnerable to stored XSS via Suggested Tags
Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with `"` prematurely ends the `<input>` tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue.
Published: 2026-01-26T22:26:59.886Z
Updated: 2026-01-27T15:20:27.830Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5249 |
vulnerable | 2026-06-08 05:11:50.515874 |
Details available
Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin function in index.php).
Published: 2018-01-05T20:00:00.000Z
Updated: 2024-08-05T05:33:44.318Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.