y
yourls
Security Risk Profile
53
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 24, 2011 to present
9
Total CVEs
4
Critical+High
1
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
53/100
medium
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
3Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
CSRF
3
3
Infoleak
1
Most Affected Products
1. Yourls Yourls9
2. Fedoraproject Fedora3
3. composer/yourls/yourls2
Recent Vulnerabilities
See more →CVE-2026-63135
CVSS 8.2high
YOURLS: Stored XSS in referrer statistics chart via crafted Referer header
Aug 21, 2026
CVE-2022-0088
CVSS 7.4high
Cross-Site Request Forgery (CSRF) in yourls/yourls
Apr 3, 2022⚠ Exploited
CVE-2021-3785
CVSS 5.4medium
Cross-site Scripting (XSS) - Stored in yourls/yourls
Sep 15, 2021
CVE-2021-3783
CVSS 6.6medium
Cross-site Scripting (XSS) - Reflected in yourls/yourls
Sep 15, 2021
CVE-2021-3734
CVSS 8.8high
Improper Restriction of Rendered UI Layers or Frames in yourls/yourls
Aug 26, 2021🔧 No Patch
CVE-2020-27388
CVSS 5.4medium
Oct 23, 2020
CVE-2019-14537
CVSS 9.8critical
Aug 7, 2019
CVE-2014-8488
CVSS 4.3medium
Dec 10, 2014🔧 No Patch
CVE-2011-3824
CVSS 5.0medium
Sep 24, 2011🔧 No Patch
Monitor yourls in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.