CVE-2021-3783

Cross-site Scripting (XSS) - Reflected in yourls/yourls

CVSS 6.6 MEDIUMEPSS 0.7%CWE-79

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

yourls · yourls/yourls

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/yourls/yourls/commit/94f6bab91182142c96ff11f481585b445449efd4 https://huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984