CVE-2025-55291
Shaarli allows reflected XSS via searchtags parameter
Summary
Shaarli allows reflected XSS via searchtags parameter
Original description
The description as published by the source.
Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability is fixed in 0.15.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-55291 shaarli Fixed in: 0.12.1+dfsg-8+deb12u1
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com