CVE-2026-48822 | Shaarli up to 0.16.1 Markdown Parser BookmarkMarkdownFormatter.php filterProtocols cross site scripting (GHSA-2hgr-63wv-x462)

June 18, 2026 Yanac

A vulnerability was found in Shaarli up to 0.16.1. It has been classified as problematic. The affected element is the function filterProtocols of the file BookmarkMarkdownFormatter.php of the component Markdown Parser. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-48822. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More