Moritz Woermann discovered that missing input sanitising in Shaarli, a personal bookmarking service, could result in cross-site scripting.
https://security-tracker.debian.org/tracker/DSA-6128-1
Continue reading...
https://security-tracker.debian.org/tracker/DSA-6128-1
Continue reading...

