Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: debian
Published: 2020-01-02T19:42:16
Updated: 2024-08-06T18:01:20.466Z
Reserved: 2014-04-01T00:00:00
Link: CVE-2013-7351
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-01-02T20:15:15.130
Modified: 2024-11-21T02:00:48.770
Link: CVE-2013-7351
Redhat
No data.