Approved changes feed: RSS · Atom
cpe:2.3:a:yourls:yourls:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Yourls (c7bec57c-d40f-57d0-98c9-43047a9e6f74) |
|---|---|
| Product | Yourls (de42eeb5-327b-5a98-a705-098d0d82a235) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/yourls/yourls |
purl2cpe | 2026-06-01 10:11:27.006997 |
pkg:rpm/fedora/yourls |
purl2cpe | 2026-06-01 10:11:27.007000 |
pkg:rpm/opensuse/yourls |
purl2cpe | 2026-06-01 10:11:27.007003 |
pkg:sourceforge/yourls.mirror |
purl2cpe | 2026-06-01 10:11:27.007006 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-0088 |
vulnerable | 2026-06-08 05:39:09.228887 |
Cross-Site Request Forgery (CSRF) in yourls/yourls
LOW (3.5)
Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
Published: 2022-04-03T08:50:10.000Z
Updated: 2026-02-16T14:48:06.656Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3785 |
vulnerable | 2026-06-08 05:33:54.007762 |
Cross-site Scripting (XSS) - Stored in yourls/yourls
HIGH (8.8)
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2021-09-15T12:05:13.000Z
Updated: 2024-08-03T17:09:09.030Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3783 |
vulnerable | 2026-06-08 05:33:54.004571 |
Cross-site Scripting (XSS) - Reflected in yourls/yourls
MEDIUM (6.6)
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2021-09-15T12:00:18.000Z
Updated: 2024-08-03T17:09:08.880Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3734 |
vulnerable | 2026-06-08 05:33:53.872131 |
Improper Restriction of Rendered UI Layers or Frames in yourls/yourls
MEDIUM (6.5)
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames
Published: 2021-08-26T12:48:50.000Z
Updated: 2024-08-03T17:01:08.346Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27388 |
vulnerable | 2026-06-08 05:23:52.674140 |
Details available
Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.
Published: 2020-10-23T19:59:37.000Z
Updated: 2026-07-09T00:11:37.770Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14537 |
vulnerable | 2026-06-08 05:12:54.952159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.