Cross-site Scripting in yourls

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-3783 · ADVISORY
• yourls/yourls commit 94f6bab · WEB
• yourls/yourls · PACKAGE
• huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984 · WEB

yourls/yourls의 다른 취약점

• CVE-2026-62858보통 5.3YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without…
• CVE-2026-63135높음 8.2YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y…
• GHSA-6mp4-q625-mxjp높음 7.1YOURLS is vulnerable to XSS through JSONP and Callback request parameters
• CVE-2022-0088높음 7.4Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
• CVE-2021-3785보통 5.4yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')