CVE-2026-24476
Shaarli vulnerable to stored XSS via Suggested Tags
Résumé
Shaarli vulnerable to stored XSS via Suggested Tags
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with " prematurely ends the `` tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-24476 shaarli Corrigé dans: 0.12.1+dfsg-8+deb12u2
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com