1 matches found
CVE-2026-63135: Improper Neutralization of Input During Web Page Generation
YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourlsgetreferrer, yourlssanitizeurlsafe, and yourlslogredirect, then aggregates the value in yourls-infos.php and passes the derived domain through...
8.2CVSS5.8AI score0.00425EPSS
SaveExploits0References2
20