<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: shaarli</title><description>Every new CVE for shaarli.</description><link>https://agentprime.io/</link><item><title>CVE-2026-110225: Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route</title><link>https://agentprime.io/advisories/CVE-2026-110225/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110225/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:50:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105263: Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-105263/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105263/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 08:45:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-50190: Shaarli vulnerable to stored XSS via raw bookmark title in document &lt;title&gt; element on public permalink page</title><link>https://agentprime.io/advisories/CVE-2026-50190/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50190/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 18:49:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48821: Shaarli: DOM-based Cross-Site Scripting (XSS) in Thumbnail Synchronizer</title><link>https://agentprime.io/advisories/CVE-2026-48821/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48821/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Jun 2026 20:33:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48823: Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search</title><link>https://agentprime.io/advisories/CVE-2026-48823/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48823/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Jun 2026 20:06:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48822: Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links</title><link>https://agentprime.io/advisories/CVE-2026-48822/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48822/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Jun 2026 19:59:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24476: Shaarli vulnerable to stored XSS via Suggested Tags</title><link>https://agentprime.io/advisories/CVE-2026-24476/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24476/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 22:26:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55291: Shaarli allows reflected XSS via searchtags parameter</title><link>https://agentprime.io/advisories/CVE-2025-55291/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55291/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Aug 2025 17:06:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2013-7351: Shaarli: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote…</title><link>https://agentprime.io/advisories/CVE-2013-7351/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2013-7351/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jan 2020 19:42:16 GMT</pubDate><category>CVE</category></item></channel></rss>