CVE-2026-48822 | Shaarli up to 0.16.1 Markdown Parser BookmarkMarkdownFormatter.php filterProtocols cross site scripting (GHSA-2hgr-63wv-x462 / Nessus ID 321663)

A vulnerability was found in . The affected element is the function filterProtocols of the file BookmarkMarkdownFormatter.php of the component Markdown Parser. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-48822. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.