Skip to content
OpenAdvisories

Vendor

YOURLS

6 known vulnerabilities.

Products

yourls/yourls 4 YOURLS 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-63135

    YOURLS: Stored XSS in referrer statistics chart via crafted Referer header

    YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourls_get_referrer(), yourls_sanitize_url_safe(), and yourls_log_redirect(), then aggregates the value in yourls-infos.…

    YOURLS YOURLS yourls/yourls Packagist
  • High 8.8
    CVE-2021-3785

    Cross-site Scripting (XSS) - Stored in yourls/yourls

    yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    YOURLS yourls/yourls yourls/yourls Packagist