What is GHSA-gx7g-wjxg-jwwj?

GHSA-gx7g-wjxg-jwwj is a security advisory published by GitHub Security Advisories with Low severity. Cross-Site Request Forgery in YOURLS

Which CVE IDs does GHSA-gx7g-wjxg-jwwj cover?

GHSA-gx7g-wjxg-jwwj covers the following CVE IDs: CVE-2022-0088. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gx7g-wjxg-jwwj?

GHSA-gx7g-wjxg-jwwj has a CVSS v3 base score of 3.5, published by GitHub Security Advisories.

Which products are affected by GHSA-gx7g-wjxg-jwwj?

GHSA-gx7g-wjxg-jwwj affects 1 product, including: composer/yourls/yourls:\u003c= 1.8.2.

GHSA-gx7g-wjxg-jwwjLowCVSS 3.5

Cross-Site Request Forgery in YOURLS

Vendor

GitHub Security Advisories

Published

April 4, 2022

Last Modified

February 18, 2026

🔗 CVE IDs covered (1)

CVE-2022-0088 →

📋 Description

YOURLS versions 1.8.2 and prior are vulnerable to Cross-Site Request Forgery.

🎯 Affected products1

composer/yourls/yourls:<= 1.8.2

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2022-0088
https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59
https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29
https://github.com/YOURLS/YOURLS/issues/3170
https://github.com/YOURLS/YOURLS/pull/3264
https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-0088.md
https://github.com/advisories/GHSA-gx7g-wjxg-jwwj