A reflected Cross-Site Scripting vulnerability in Shaarli versions prior to 0.15.0 allows attackers to execute arbitrary scripts in the context of a user session.

The application fails to properly sanitize input on the cloud tag page, allowing for the injection of the tag. This results in a reflected Cross-Site Scripting (XSS) condition that can be triggered by an unauthenticated attacker, provided they can induce a user to interact with a crafted link.

The vulnerability carries a CVSS score of 7.1, reflecting a significant risk to user integrity and session security. Successful exploitation allows for the execution of malicious scripts within the context of an authenticated user session, potentially leading to unauthorized actions, session hijacking, or the exfiltration of sensitive information stored within the bookmark manager.

Immediate Action: Upgrade your Shaarli installation to version 0.15.0 or later to ensure the input sanitization fix is applied.

Proactive Monitoring: Review web access logs for unusual URL parameters containing HTML tags or suspicious script characters directed at the cloud tag page.

Compensating Controls: Implement a strict Content Security Policy (CSP) to restrict the execution of inline scripts and unauthorized external resources, which can mitigate the impact of XSS vulnerabilities.

Public Exploit Available: Unknown.

Given the potential for session compromise and the existence of proof-of-concept evidence, administrators should prioritize updating to version 0.15.0 immediately. While user interaction is required for exploitation, the risk to organizational data integrity remains high, necessitating a prompt patch cycle to eliminate the underlying injection flaw.