Skip to content
OpenAdvisories

Vendor

YOURLS

6 known vulnerabilities.

Products

yourls/yourls 4 YOURLS 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-62858

    YOURLS: Unauthenticated File Inclusion

    YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without sanitization, after which yourls_sanitize_url() and yourls_esc_url() preserved dot and slash traversal sequences befor…

    YOURLS YOURLS yourls/yourls Packagist
  • Medium 6.6
    CVE-2021-3783

    Cross-site Scripting (XSS) - Reflected in yourls/yourls

    yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    YOURLS yourls/yourls yourls/yourls Packagist
  • Medium 6.5
    CVE-2021-3734

    Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

    yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

    YOURLS yourls/yourls yourls/yourls Packagist