MEDIUM🇬🇧 English

CVE-2021-3785

CVSS 5.4v3.1pub. 2021-09-15upd. 2024-11-21

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

  • Yourls

    APP
    Yourls
    < 1.8.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
XSS
CWE
Referencje

Powiązane podatności

CVE-2019-14537CRITICAL9.8ten sam produkt

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in logi...

CVE-2022-0088HIGH7.4ten sam produkt

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

CVE-2021-3734HIGH8.8ten sam produkt

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

CVE-2021-3783MEDIUM6.1ten sam produkt

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-27388MEDIUM5.4ten sam produkt

Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7...