Approved changes feed: RSS · Atom

cpe:2.3:a:yourls:yourls:1.7:*:*:*:*:*:*:*

part: a version: 1.7 update: *

VendorYourls (c7bec57c-d40f-57d0-98c9-43047a9e6f74)
ProductYourls (de42eeb5-327b-5a98-a705-098d0d82a235)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/yourls/yourls purl2cpe 2026-06-01 10:11:27.007057
pkg:rpm/fedora/yourls purl2cpe 2026-06-01 10:11:27.007059
pkg:rpm/opensuse/yourls purl2cpe 2026-06-01 10:11:27.007060
pkg:sourceforge/yourls.mirror purl2cpe 2026-06-01 10:11:27.007061

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8488 vulnerable 2026-06-08 05:06:08.950116 Details available
Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.
Published: 2014-12-10T01:00:00.000Z
Updated: 2024-08-06T13:18:48.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.