Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/08/21 8:57 p.m.15 views

YOURLS has stored XSS in referrer statistics chart via crafted Referer header

Summary YOURLS stores the HTTP Referer header for short URL redirects and later renders aggregated referrer domains in the per-link statistics page. An unauthenticated attacker can send a crafted Referer header to any existing short URL. When an authenticated administrator or stats-page viewer...

8.2CVSS5.5AI score0.00314EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/21 8:57 p.m.10 views

GHSA-5H77-88J3-R659 YOURLS has stored XSS in referrer statistics chart via crafted Referer header

Summary YOURLS stores the HTTP Referer header for short URL redirects and later renders aggregated referrer domains in the per-link statistics page. An unauthenticated attacker can send a crafted Referer header to any existing short URL. When an authenticated administrator or stats-page viewer...

8.2CVSS5.7AI score0.00314EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/11/08 2:38 p.m.8 views

WordPress Google Visualization Charts plugin <= 0.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Google Visualization Charts versions = 0.1...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder