CVE-2013-7351: Shaarli Project Shaarli

Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.

Affected products

• Shaarli Project Shaarli: affected versions not specified

Published 2020-01-02. Last modified 2026-06-17.