Cross site scripting

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3785

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3785

CVE-2021-3785 affects YOURLS (PHP-based short-linking platform). Multiple connected sources describe a Cross-site Scripting flaw caused by improper neutralization of user input during page generation, with versions prior to 1.8.2 explicitly vulnerable (YOURLS 1.8.2+ may have fixes per CNVD/CNNVD ...

CVE-2021-3785 Cross-site Scripting (XSS) - Stored in yourls/yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3783 Cross-site Scripting (XSS) - Reflected in yourls/yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3783

CVE-2021-3783 concerns the open‑source short URL platform YOURLS, with a reported vulnerability of Cross-site Scripting (XSS) due to improper input neutralization during web page generation. The available connected documents consistently identify the affected component as yourls/yourls and descri...

YOURS cross-site scripting vulnerabilities

YOURLS is a PHP-based short linking platform. YOURLS versions prior to 1.8.2 are vulnerable to a cross-site scripting vulnerability that originates when the program does not properly validate user input during page generation. An attacker could use this vulnerability to launch a cross-site...

CVE-2021-3785: Improper Neutralization of Input During Web Page Generation

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3783: Improper Neutralization of Input During Web Page Generation

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

PT-2021-21879

Name of the Vulnerable Software and Affected Versions: yourls affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This occurs in the handling of arbitrary paths. Recommendations: At t...

PT-2021-21888

Name of the Vulnerable Software and Affected Versions: yourls affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This occurs in the edit dialog of the application. Recommendations: A...

Cross-site Scripting (XSS) - Reflected in yourls/yourls

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

GHSA-R6G8-JMJ9-G945 Improper Restriction of Rendered UI Layers or Frames in yourls

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

Improper Restriction of Rendered UI Layers or Frames in yourls

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

CVE-2021-3734

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

CVE-2021-3734

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

Input validation

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

CVE-2021-3734

CVE-2021-3734 concerns YOURLS and is described in multiple sources as a vulnerability due to improper restriction of rendered UI layers or frames (clickjacking). The core issue is lack of frame restrictions, allowing an attacker to embed the application in an iframe and potentially trick users in...