105 matches found
CVE-2022-0088
YOURLS 1.8.2 (and earlier) is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the yourls/yourls project, with PoCs and public writeups showing CSRF could be triggered via crafted requests (e.g., admin/logout actions). References in the connected documents include packetstorm CSRF...
CVE-2022-0088 Cross-Site Request Forgery (CSRF) in yourls/yourls
Cross-Site Request Forgery CSRF in GitHub repository yourls/yourls prior to 1.8.3...
YOURLS 跨站请求伪造漏洞
YOURLS is a set of PHP-based open source short link platform. A cross-site request forgery vulnerability exists in YOURLS versions prior to 1.8.3. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...
Cross-Site Request Forgery (CSRF) in yourls/yourls
Description 1. Hi there YOURLS team, I would like to report a Cross Site Request forgery vulenrability on YOURLS. Cross-site request forgery also known as CSRF is a web security vulnerability that allows an attacker to induce users to perform actions that they do not intend to perform. It allows ...
Cross-site Scripting in yourls
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in arbitrary path handling...
GHSA-CPQ8-X35G-M439 Cross-site Scripting in yourls
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in arbitrary path handling...
GHSA-M9FQ-C9HP-59G7 Cross-site Scripting in yourls
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in edit dialog...
Cross-site Scripting in yourls
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in edit dialog...
CVE-2021-3785
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3785
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3783
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3783
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3785
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3783
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3785 Cross-site Scripting (XSS) - Stored in yourls/yourls
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3785
CVE-2021-3785 affects YOURLS (PHP-based short-linking platform). Multiple connected sources describe a Cross-site Scripting flaw caused by improper neutralization of user input during page generation, with versions prior to 1.8.2 explicitly vulnerable (YOURLS 1.8.2+ may have fixes per CNVD/CNNVD ...
CVE-2021-3783
CVE-2021-3783 concerns the open‑source short URL platform YOURLS, with a reported vulnerability of Cross-site Scripting (XSS) due to improper input neutralization during web page generation. The available connected documents consistently identify the affected component as yourls/yourls and descri...