Cross-site Scripting in yourls

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-3783 · ADVISORY
• yourls/yourls commit 94f6bab · WEB
• yourls/yourls · PACKAGE
• huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984 · WEB

Lỗ hổng khác của yourls/yourls

• CVE-2026-62858TRUNG BÌNH 5.3YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without…
• CVE-2026-63135CAO 8.2YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y…
• GHSA-6mp4-q625-mxjpCAO 7.1YOURLS is vulnerable to XSS through JSONP and Callback request parameters
• CVE-2022-0088CAO 7.4Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
• CVE-2021-3785TRUNG BÌNH 5.4yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')