Yourls vulnerabilities
We track 1 vulnerability in Yourls products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Yourls vulnerabilities
- 8.2 High severity
YOURLS: Improper Neutralization of Input During Web Page Generation
YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourls_get_referrer(), yourls_sanitize_url_safe(), and yourls_log_redirect(), then aggregates the value in yourls-infos.p