YOURLS vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 20221
3. 20262

Newest CVEs

• CVE-2026-62858

  YOURLS: Unauthenticated File Inclusion

  YOURLS · YOURLS

  Medium5.3
• CVE-2026-63135

  YOURLS: Stored XSS in referrer statistics chart via crafted Referer header

  YOURLS · YOURLS

  High8.2
• CVE-2022-0088

  Cross-Site Request Forgery (CSRF) in yourls/yourls

  yourls · yourls/yourls

  Low3.5
• CVE-2021-3785

  Cross-site Scripting (XSS) - Stored in yourls/yourls

  yourls · yourls/yourls

  High8.8
• CVE-2021-3783

  Cross-site Scripting (XSS) - Reflected in yourls/yourls

  yourls · yourls/yourls

  Medium6.6
• CVE-2021-3734

  Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

  yourls · yourls/yourls

  Medium6.5