Vulnerability GHSA-gx7g-wjxg-jwwj
Low Risk
LOW RISK
CVSS Score: 3.5
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
4 years ago
April 04, 2022 at 12:00 AM UTC
Cross-Site Request Forgery in YOURLS
1.7.1 - 1.8.2
1.7.1 - 1.8.2
Summary
Cross-Site Request Forgery in YOURLS
Details
YOURLS versions 1.8.2 and prior are vulnerable to Cross-Site Request Forgery.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 hours ago
YOURLS: Unauthenticated File Inclusion
1.7.1 - 1.10.4 GHSA-f8ff-652m-j5rx
1.7.1 - 1.10.4 GHSA-f8ff-652m-j5rx
High Risk
1 month ago
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
1.7.1 - 1.10.3 GHSA-5h77-88j3-r659
1.7.1 - 1.10.3 GHSA-5h77-88j3-r659
High Risk
9 months ago
YOURLS is vulnerable to XSS through JSONP and Callback request parameters
1.7.1 - 1.10.2 GHSA-6mp4-q625-mxjp
1.7.1 - 1.10.2 GHSA-6mp4-q625-mxjp
Medium Risk
4 years ago
YOURLS Stored Cross Site Scripting (XSS)
1.7.1 - 1.7.9 GHSA-pwgg-r6fq-mf94
1.7.1 - 1.7.9 GHSA-pwgg-r6fq-mf94
Medium Risk
5 years ago
Cross-site Scripting in yourls
1.7.1 - 1.8.2 GHSA-cpq8-x35g-m439
1.7.1 - 1.8.2 GHSA-cpq8-x35g-m439
Impacted packages
Timeline
Published
4 years ago
April 04, 2022 at 12:00 AM UTC
Last Modified
7 months ago
February 18, 2026 at 11:38 PM UTC