tocsin

Debian/shaarli: medium 6.1

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDaily

Action: Upgrade shaarli to 0.0.41~beta~dfsg2-4 or later.

Affected

introducedfixedlast affected
00.0.41~beta~dfsg2-4-

Fixed versions

0.0.41~beta~dfsg2-4

Sources

published · modified · JSON