Vulnerability GHSA-cpq8-x35g-m439
Medium Risk
MEDIUM RISK
CVSS Score: 6.6
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
5 years ago
September 20, 2021 at 08:43 PM UTC
Cross-site Scripting in yourls
1.7.1 - 1.8.2
1.7.1 - 1.8.2
Summary
Cross-site Scripting in yourls
Details
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in arbitrary path handling.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 hours ago
YOURLS: Unauthenticated File Inclusion
1.7.1 - 1.10.4 GHSA-f8ff-652m-j5rx
1.7.1 - 1.10.4 GHSA-f8ff-652m-j5rx
High Risk
1 month ago
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
1.7.1 - 1.10.3 GHSA-5h77-88j3-r659
1.7.1 - 1.10.3 GHSA-5h77-88j3-r659
High Risk
9 months ago
YOURLS is vulnerable to XSS through JSONP and Callback request parameters
1.7.1 - 1.10.2 GHSA-6mp4-q625-mxjp
1.7.1 - 1.10.2 GHSA-6mp4-q625-mxjp
Medium Risk
4 years ago
YOURLS Stored Cross Site Scripting (XSS)
1.7.1 - 1.7.9 GHSA-pwgg-r6fq-mf94
1.7.1 - 1.7.9 GHSA-pwgg-r6fq-mf94
Low Risk
4 years ago
Cross-Site Request Forgery in YOURLS
1.7.1 - 1.8.2 GHSA-gx7g-wjxg-jwwj
1.7.1 - 1.8.2 GHSA-gx7g-wjxg-jwwj
Impacted packages
Timeline
Published
5 years ago
September 20, 2021 at 08:43 PM UTC
Last Modified
2 years ago
November 08, 2023 at 04:06 AM UTC