Sshaarli

Products

Exploited and recent CVEs

• CVE-2026-110225 Low 2.7 Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route 0.3%
• CVE-2026-50190 High 8.6 Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page 0.4%
• CVE-2026-48821 Medium 5.8 Shaarli: DOM-based Cross-Site Scripting (XSS) in Thumbnail Synchronizer 0.1%
• CVE-2026-48823 Medium 4.8 Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search 0.1%
• CVE-2026-48822 Medium 5.8 Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links 0.1%
• CVE-2026-24476 Medium 5.3 Shaarli vulnerable to stored XSS via Suggested Tags 0.2%
• CVE-2025-55291 High 7.1 Shaarli allows reflected XSS via searchtags parameter 0.2%