Lucene search
K

100 matches found

Github Security Blog
Github Security Blog
added 2021/09/20 8:43 p.m.41 views

Cross-site Scripting in yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in arbitrary path handling...

6.6CVSS6.3AI score0.00673EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/09/20 8:43 p.m.18 views

GHSA-CPQ8-X35G-M439 Cross-site Scripting in yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in arbitrary path handling...

6.6CVSS6.2AI score0.00673EPSS
Exploits0References4
OSV
OSV
added 2021/09/20 8:42 p.m.15 views

GHSA-M9FQ-C9HP-59G7 Cross-site Scripting in yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in edit dialog...

5.4CVSS5.3AI score0.00697EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/09/20 8:42 p.m.39 views

Cross-site Scripting in yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in edit dialog...

8.8CVSS5.5AI score0.00697EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2021/09/15 12:15 p.m.15 views

CVE-2021-3785

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS0.00697EPSS
Exploits1References2
OSV
OSV
added 2021/09/15 12:15 p.m.13 views

CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.8AI score
Exploits0References2
OSV
OSV
added 2021/09/15 12:15 p.m.14 views

CVE-2021-3785

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.7AI score
Exploits0References2
NVD
NVD
added 2021/09/15 12:15 p.m.19 views

CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.6CVSS0.00673EPSS
Exploits0References2
Prion
Prion
added 2021/09/15 12:15 p.m.21 views

Cross site scripting

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.3CVSS6.2AI score0.00673EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/15 12:15 p.m.3 views

CVE-2021-3785

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.8AI score0.00697EPSS
Exploits1References3
Prion
Prion
added 2021/09/15 12:15 p.m.18 views

Cross site scripting

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.4AI score0.00697EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/09/15 12:5 p.m.72 views

CVE-2021-3785

CVE-2021-3785 affects YOURLS (PHP-based short-linking platform). Multiple connected sources describe a Cross-site Scripting flaw caused by improper neutralization of user input during page generation, with versions prior to 1.8.2 explicitly vulnerable (YOURLS 1.8.2+ may have fixes per CNVD/CNNVD ...

8.8CVSS5.8AI score0.00697EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/09/15 12:5 p.m.20 views

CVE-2021-3785 Cross-site Scripting (XSS) - Stored in yourls/yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS5.7AI score0.00697EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/09/15 12:0 p.m.23 views

CVE-2021-3783 Cross-site Scripting (XSS) - Reflected in yourls/yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.6CVSS6.4AI score0.00673EPSS
Exploits0References2
CVE
CVE
added 2021/09/15 12:0 p.m.71 views

CVE-2021-3783

CVE-2021-3783 concerns the open‑source short URL platform YOURLS, with a reported vulnerability of Cross-site Scripting (XSS) due to improper input neutralization during web page generation. The available connected documents consistently identify the affected component as yourls/yourls and descri...

6.6CVSS6.2AI score0.00673EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/09/15 12:0 a.m.5 views

YOURLS 跨站脚本漏洞

YOURLS is a PHP-based short linking platform. YOURLS versions prior to 1.8.2 are vulnerable to a cross-site scripting vulnerability that originates when the program does not properly validate user input during page generation. An attacker could use this vulnerability to launch a cross-site...

8.8CVSS5.2AI score0.00697EPSS
Exploits1References2
Huntr
Huntr
added 2021/09/09 10:11 a.m.22 views

Cross-site Scripting (XSS) - Reflected in yourls/yourls

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

4.3CVSS2.3AI score0.00673EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2021/08/30 4:22 p.m.49 views

Improper Restriction of Rendered UI Layers or Frames in yourls

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

8.8CVSS8.4AI score0.00405EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/30 4:22 p.m.18 views

GHSA-R6G8-JMJ9-G945 Improper Restriction of Rendered UI Layers or Frames in yourls

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

6.5CVSS8.6AI score0.00405EPSS
Exploits1References4
NVD
NVD
added 2021/08/26 1:15 p.m.15 views

CVE-2021-3734

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

8.8CVSS0.00405EPSS
Exploits1References2
Rows per page
Query Builder