Description

Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.

Remediation

References

CVE-2014-8488

Related Vulnerabilities

WordPress Plugin Membership For WooCommerce-Add Simple Membership Plans, Recurring Revenue, Product Tags & Send Emails To Members with WooCommerce Membership Arbitrary File Upload (2.1.6)

WordPress Plugin Cimy User Extra Fields Denial of Service (2.6.3)

MySQL CVE-2018-2773 Vulnerability (CVE-2018-2773)

WordPress Plugin WP-Client Lite::Client Portals, File Sharing, Messaging & Invoicing Local File Inclusion (1.1.1)

WordPress Plugin Compact WP Audio Player Cross-Site Scripting (1.9.7)

Severity

Medium

Classification

CVE-2014-8488 CWE-707

Tags

Missing Update Known Vulnerabilities