CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3785 Cross-site Scripting (XSS) - Stored in yourls/yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3785

CVE-2021-3785 affects YOURLS (PHP-based short-linking platform). Multiple connected sources describe a Cross-site Scripting flaw caused by improper neutralization of user input during page generation, with versions prior to 1.8.2 explicitly vulnerable (YOURLS 1.8.2+ may have fixes per CNVD/CNNVD ...

CVE-2021-3783

CVE-2021-3783 concerns the open‑source short URL platform YOURLS, with a reported vulnerability of Cross-site Scripting (XSS) due to improper input neutralization during web page generation. The available connected documents consistently identify the affected component as yourls/yourls and descri...

CVE-2021-3783 Cross-site Scripting (XSS) - Reflected in yourls/yourls

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

YOURLS 跨站脚本漏洞

YOURLS is a PHP-based short linking platform. YOURLS versions prior to 1.8.2 are vulnerable to a cross-site scripting vulnerability that originates when the program does not properly validate user input during page generation. An attacker could use this vulnerability to launch a cross-site...

Cross-site Scripting (XSS) - Reflected in yourls/yourls

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

GHSA-R6G8-JMJ9-G945 Improper Restriction of Rendered UI Layers or Frames in yourls

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

Improper Restriction of Rendered UI Layers or Frames in yourls

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

CVE-2021-3734

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

CVE-2021-3734

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

Input validation

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

CVE-2021-3734

CVE-2021-3734 concerns YOURLS and is described in multiple sources as a vulnerability due to improper restriction of rendered UI layers or frames (clickjacking). The core issue is lack of frame restrictions, allowing an attacker to embed the application in an iframe and potentially trick users in...

CVE-2021-3734 Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...

yourls 安全漏洞

YOURLS is an open source PHP-based short linking platform. A security vulnerability exists in yourls, which stems from the fact that yourls is susceptible to improper restrictions on rendering UI layers or frames. An attacker could exploit this vulnerability to cause an operation to be performed...

Cross-site Scripting (XSS) - Stored in yourls/yourls

✍️ Description stored xss 🕵️‍♂️ Proof of Concept plz check this 1 minute video to reproduce the bug https://drive.google.com/file/d/1MHQSKVczRNwDC8S6xKuedjMNcQw8YOz5/view?usp=sharing 💥 Impact Stored xss allow to executed arbitary javascript code...

Cross-Site Scripting (XSS)

yourls/yourls is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the plugin file header...

YOURLS Admin Panel Cross-Site Scripting Vulnerability

YOURLS is a set of PHP-based open source short link platform. A cross-site scripting vulnerability exists in YOURLS Admin Panel versions 1.5 through 1.7.10, which stems from an authenticated user having to modify a PHP plugin with a malicious load and upload it, resulting in multiple stored XSS...

CVE-2020-27388

Multiple Stored Cross Site Scripting XSS vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues...

CVE-2020-27388

Multiple Stored Cross Site Scripting XSS vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues...