Executive brief
YOURLS Stored Cross Site Scripting (XSS)
Affected products
- Packagist yourls/yourls
Junglewise Threat Intelligence
CVE-2020-27388: YOURLS Stored Cross Site Scripting (XSS)
CVE-2020-27388 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: yourls/yourls (Packagist). Vendors: Packagist.
Related threats
- YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y
- YOURLS is vulnerable to XSS through JSONP and Callback request parameters
- Cross-Site Request Forgery in YOURLS
- Cross-site Scripting in yourls
- Cross-site Scripting in yourls