← All advisories

Medium severity5.4NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026

CVE-2021-3785

CVE-2021-3785

Description

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
yourls/yourlsPackagist	< 1.8.2	1.8.2

Affected products

3

Yourls/Yourls2 versions
cpe:2.3:a:yourls:yourls:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:yourls:yourls:*:*:*:*:*:*:*:*range: <1.8.2
- (no CPE)range: unspecified
ghsa-coords
pkg:composer/yourls/yourls
Range: < 1.8.2

Patches

Vulnerability mechanics

References

4

github.com/yourls/yourls/commit/1d8e224ebabb8a4c75b97f026950ed710faab0ffnvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/b4085d13-54fa-4419-a2ce-1d780cc31638nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-m9fq-c9hp-59g7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-3785ghsaADVISORY

News mentions

0

No linked articles in our index yet.