7A6163

**Name of the Vulnerable Software and Affected Versions** Shaarli version 0.12.2 **Description** The issue is a Reflected Cross Site Scripting (XSS) vulnerability, which allows remote attackers to execute arbitrary code via the search tag function. This means an attacker can inject malicious code into the search function, potentially leading to unauthorized actions on the affected system. **Recommendations** For Shaarli version 0.12.2, consider disabling the search tag function until a patch is available to prevent exploitation of the Reflected Cross Site Scripting (XSS) vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microbin version 1.2.0 **Description** A cross-site scripting vulnerability in the component microbin/src/pasta.rs of Microbin allows attackers to execute arbitrary web scripts or HTML via a crafted payload. **Recommendations** For Microbin version 1.2.0, consider disabling access to the microbin/src/pasta.rs component until a patch is available. Restrict the execution of arbitrary web scripts or HTML to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.