Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-55291

Shaarli allows reflected XSS via searchtags parameter

Description

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the </title> tag to be prematurely closed, leading to a reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability is fixed in 0.15.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

shaarli Shaarli

  • < 0.15.0affected

References