YOURLS vulnerabilities
CVEs whose affected-version data names the YOURLS package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-62858Medium· 5.3PoCYOURLS is a self-hosted, customizable URL shortener written in PHP
YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without sanitization, after which yourls_sanitize_url() and yourls_esc_url() preserved dot and slash tra…
▾ TwilightYOURLS · YOURLSEPSS 0.47%via NVD
CVE-2020-27388Medium· 5.4Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10
Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS is…
▾ Sunlityourls · yourlsEPSS 0.71%via NVD