2 matches found
YOURLS has stored XSS in referrer statistics chart via crafted Referer header
Summary YOURLS stores the HTTP Referer header for short URL redirects and later renders aggregated referrer domains in the per-link statistics page. An unauthenticated attacker can send a crafted Referer header to any existing short URL. When an authenticated administrator or stats-page viewer...
8.2CVSS5.5AI score0.00247EPSS
SaveExploits0References5Affected Software1
WordPress Google Visualization Charts plugin <= 0.1 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Google Visualization Charts versions = 0.1...
6.5CVSS5.8AI score0.00315EPSS
SaveExploits0Affected Software1
20