Releases2
Frequency5 months 4 weeks
Last Release
Personal, minimalist, super-fast and no-database bookmarking service
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 0.16.0 | 5.4 MEDIUM | — | ||
Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with `"` prematurely ends the `<input>` tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue. | ||||