Executive brief
Cross-site Scripting in yourls
Affected products
- Packagist yourls/yourls
Junglewise Threat Intelligence
CVE-2021-3785: Cross-site Scripting in yourls
CVE-2021-3785 · Severity: low · CVSS 3.1 · Published 2021-09-20
Technologies: yourls/yourls (Packagist). Vendors: Packagist.
Related threats
- YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y
- YOURLS is vulnerable to XSS through JSONP and Callback request parameters
- YOURLS Stored Cross Site Scripting (XSS)
- Cross-Site Request Forgery in YOURLS
- Cross-site Scripting in yourls