GHSA-pwgg-r6fq-mf94MediumCVSS 5.4

YOURLS Stored Cross Site Scripting (XSS)

Published
May 24, 2022
Last Modified
January 10, 2024

🔗 CVE IDs covered (1)

CVE-2020-27388 →

📋 Description

Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.

🎯 Affected products1

  • composer/yourls/yourls:>= 1.5, < 1.8

🔗 References (7)