Home Embedded Vulns General Vulns

CVE-2013-7351

MEDIUM 6.1

Our Analysis: General Purpose

Our model has classified this vulnerability as relevant to General Purpose Systems, helping your team prioritize efforts effectively.

Published Date January 2, 2020
Last Modified November 21, 2024
CVSS Vector Not Available

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.

Potentially Affected Vendors