Vulnerability GHSA-pwgg-r6fq-mf94
Medium Risk
MEDIUM RISK
CVSS Score: 5.4
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 years ago
May 24, 2022 at 05:32 PM UTC
YOURLS Stored Cross Site Scripting (XSS)
1.7.1 - 1.7.9
1.7.1 - 1.7.9
Summary
YOURLS Stored Cross Site Scripting (XSS)
Details
Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 hours ago
YOURLS: Unauthenticated File Inclusion
1.7.1 - 1.10.4 GHSA-f8ff-652m-j5rx
1.7.1 - 1.10.4 GHSA-f8ff-652m-j5rx
High Risk
1 month ago
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
1.7.1 - 1.10.3 GHSA-5h77-88j3-r659
1.7.1 - 1.10.3 GHSA-5h77-88j3-r659
High Risk
9 months ago
YOURLS is vulnerable to XSS through JSONP and Callback request parameters
1.7.1 - 1.10.2 GHSA-6mp4-q625-mxjp
1.7.1 - 1.10.2 GHSA-6mp4-q625-mxjp
Low Risk
4 years ago
Cross-Site Request Forgery in YOURLS
1.7.1 - 1.8.2 GHSA-gx7g-wjxg-jwwj
1.7.1 - 1.8.2 GHSA-gx7g-wjxg-jwwj
Medium Risk
5 years ago
Cross-site Scripting in yourls
1.7.1 - 1.8.2 GHSA-cpq8-x35g-m439
1.7.1 - 1.8.2 GHSA-cpq8-x35g-m439
Impacted packages
Timeline
Published
4 years ago
May 24, 2022 at 05:32 PM UTC
Fixed (1.8)
5 years ago
February 22, 2021 at 03:36 PM UTC
Last Modified
2 years ago
February 16, 2024 at 08:10 AM UTC