Skip to content
OpenAdvisories

Package · Packagist

yourls/yourls

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-62858

    YOURLS: Unauthenticated File Inclusion

    YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without sanitization, after which yourls_sanitize_url() and yourls_esc_url() preserved dot and slash traversal sequences befor…

    YOURLS YOURLS yourls/yourls Packagist
  • Medium 6.6
    CVE-2021-3783

    Cross-site Scripting (XSS) - Reflected in yourls/yourls

    yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    YOURLS yourls/yourls yourls/yourls Packagist
  • Medium 6.5
    CVE-2021-3734

    Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

    yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

    YOURLS yourls/yourls yourls/yourls Packagist
  • Medium 5.4
    CVE-2020-27388

    YOURLS Stored Cross Site Scripting (XSS)

    Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.

    yourls/yourls Packagist