Executive brief
Cross-Site Request Forgery in YOURLS
Affected products
- Packagist yourls/yourls
Junglewise Threat Intelligence
CVE-2022-0088: Cross-Site Request Forgery in YOURLS
CVE-2022-0088 · Severity: low · CVSS 3 · Published 2022-04-04
Technologies: yourls/yourls (Packagist). Vendors: Packagist.
Related threats
- YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y
- YOURLS is vulnerable to XSS through JSONP and Callback request parameters
- YOURLS Stored Cross Site Scripting (XSS)
- Cross-site Scripting in yourls
- Cross-site Scripting in yourls