sebsauvage/Shaarli

sebsauvage/Shaarli

GitHubGitHub
GitHubgithub.com
sebsauvage.netsebsauvage.net
Releases0
Stars690
The personal, minimalist, super-fast, no-database delicious clone.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2013-7351↗
6.1 MEDIUM4.3 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.