Improper Restriction of Rendered UI Layers or Frames in yourls

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-3734 · ADVISORY
• yourls/yourls commit 0a70acd · WEB
• yourls/yourls · PACKAGE
• huntr.dev/bounties/dd2e2dbe-efe5-49ec-be11-7a7e7c41debd · WEB

yourls/yourls 的其他漏洞

• CVE-2026-62858中危 5.3YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without…
• CVE-2026-63135高危 8.2YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y…
• GHSA-6mp4-q625-mxjp高危 7.1YOURLS is vulnerable to XSS through JSONP and Callback request parameters
• CVE-2022-0088高危 7.4Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
• CVE-2021-3785中危 5.4yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')