MEDIUM🇵🇱 Wersja polska

CVE-2020-27388

CVSS 5.4v3.1pub. 2020-10-23upd. 2026-07-05

Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

  • Yourls

    APP
    Yourls
    1.5 – 1.7.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2019-14537CRITICAL9.8ten sam produkt

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in logi...

CVE-2022-0088HIGH7.4ten sam produkt

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

CVE-2021-3734HIGH8.8ten sam produkt

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

CVE-2021-3783MEDIUM6.1ten sam produkt

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-3785MEDIUM5.4ten sam produkt

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')