Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

YOURLS vulnerabilities

6 published CVEs name YOURLS among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-62858

    YOURLS: Unauthenticated File Inclusion

    YOURLS · YOURLS

    Medium5.3
  • CVE-2026-63135

    YOURLS: Stored XSS in referrer statistics chart via crafted Referer header

    YOURLS · YOURLS

    High8.2
  • CVE-2022-0088

    Cross-Site Request Forgery (CSRF) in yourls/yourls

    yourls · yourls/yourls

    Low3.5
  • CVE-2021-3785

    Cross-site Scripting (XSS) - Stored in yourls/yourls

    yourls · yourls/yourls

    High8.8
  • CVE-2021-3783

    Cross-site Scripting (XSS) - Reflected in yourls/yourls

    yourls · yourls/yourls

    Medium6.6
  • CVE-2021-3734

    Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

    yourls · yourls/yourls

    Medium6.5
All 6 in the list