Unscored CVE-2014-8488 EUVD-2014-8325GHSA-j7fj-3fx3-pr27

Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or…

Published Dec 10, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.

References

FEDORA-2015-5965 vendor-advisory
FEDORA-2015-5972 vendor-advisory
FEDORA-2015-6002 vendor-advisory
20141025 Yourls XSS Stored mailing-list