Yourls vulnerabilities

Products

• Yourls 10
• Yourls/yourls 4

Newest

• yourls YOURLS: Unauthenticated File Inclusion CVE-2026-62858 Fix available 5.3 MediumOctober 14, 2026
• yourls YOURLS: Stored XSS in referrer statistics chart via crafted Referer header CVE-2026-63135 Fix available 8.2 HighAugust 21, 2026
• yourls, yourls yourls/yourls +1 more Cross-Site Request Forgery (CSRF) in yourls/yourls CVE-2022-0088 Public exploit 3.5 LowApril 3, 2022
• yourls, yourls yourls/yourls +1 more Cross-site Scripting (XSS) - Stored in yourls/yourls CVE-2021-3785 Fix available 8.8 HighSeptember 15, 2021
• yourls, yourls yourls/yourls +1 more Cross-site Scripting (XSS) - Reflected in yourls/yourls CVE-2021-3783 6.6 MediumSeptember 15, 2021
• yourls, yourls yourls/yourls +1 more Improper Restriction of Rendered UI Layers or Frames in yourls/yourls CVE-2021-3734 6.5 MediumAugust 26, 2021
• yourls YOURLS Stored Cross Site Scripting (XSS) CVE-2020-27388 Fix available 5.4 MediumOctober 23, 2020
• yourls Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls CVE-2019-14537 Public exploitFix available 9.8 CriticalAugust 7, 2019
• yourls, fedoraproject fedora +1 more Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote... CVE-2014-8488 4.3 MediumDecember 10, 2014
• yourls Your Own URL Shortener (YOURLS) 1.5 allows remote attackers to obtain sensitive information via a... CVE-2011-3824 5.0 MediumSeptember 24, 2011