CVE Database
/

CVE-2014-8488

Back to search

CVE-2014-8488

Published: Dec 10, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2015-5965
vendor-advisory
x_refsource_FEDORA
FEDORA-2015-5972
vendor-advisory
x_refsource_FEDORA
FEDORA-2015-6002
vendor-advisory
x_refsource_FEDORA
20141025 Yourls XSS Stored
mailing-list
x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now