yourls/yourls vulnerabilities (Packagist)

9 vulnerabilities.

• yourls/yourls Packagist YOURLS: Unauthenticated File Inclusion CVE-2026-62858 Fix available 5.3 MediumOctober 14, 2026
• yourls/yourls Packagist YOURLS: Stored XSS in referrer statistics chart via crafted Referer header CVE-2026-63135 Fix available 8.2 HighAugust 21, 2026
• yourls/yourls Packagist YOURLS is vulnerable to XSS through JSONP and Callback request parameters GHSA-6mp4-q625-mxjp 7.1 HighDecember 30, 2025
• yourls/yourls Packagist Cross-Site Request Forgery (CSRF) in yourls/yourls CVE-2022-0088 Public exploit 3.5 LowApril 3, 2022
• yourls/yourls Packagist Cross-site Scripting (XSS) - Stored in yourls/yourls CVE-2021-3785 Fix available 8.8 HighSeptember 15, 2021
• yourls/yourls Packagist Cross-site Scripting (XSS) - Reflected in yourls/yourls CVE-2021-3783 6.6 MediumSeptember 15, 2021
• yourls/yourls Packagist Improper Restriction of Rendered UI Layers or Frames in yourls/yourls CVE-2021-3734 6.5 MediumAugust 26, 2021
• yourls/yourls Packagist YOURLS Stored Cross Site Scripting (XSS) CVE-2020-27388 Fix available 5.4 MediumOctober 23, 2020
• yourls/yourls Packagist Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls CVE-2019-14537 Public exploitFix available 9.8 CriticalAugust 7, 2019