~ / search / GHSA-cpq8-x35g-m439

GHSA-cpq8-x35g-m439

Cross-site Scripting in yourls

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-3783

Packages

EcosystemPackageAffectedFixed in
Packagist yourls/yourls <= 1.8.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in arbitrary path handling.

References

External links from the advisory. They lead to third-party sites.