Log in Start free

YOURLS

Products

ProductCVEsExploitedLatest
yourls/yourls4–Apr 3, 2022
YOURLS2–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-62858 Medium 5.3 YOURLS: Unauthenticated File Inclusion 0.5%
  • CVE-2026-63135 High 8.2 YOURLS: Stored XSS in referrer statistics chart via crafted Referer header 0.4%
  • CVE-2022-0088 Low 3.5 Cross-Site Request Forgery (CSRF) in yourls/yourls 2.0%
  • CVE-2021-3785 High 8.8 Cross-site Scripting (XSS) - Stored in yourls/yourls 0.7%
  • CVE-2021-3783 Medium 6.6 Cross-site Scripting (XSS) - Reflected in yourls/yourls 0.7%
  • CVE-2021-3734 Medium 6.5 Improper Restriction of Rendered UI Layers or Frames in yourls/yourls 0.4%