Cross-site Scripting (XSS) - Stored in yourls/yourls
Valid
Reported on
Aug 24th 2021
✍️ Description
stored xss
🕵️♂️ Proof of Concept
plz check this 1 minute video to reproduce the bug https://drive.google.com/file/d/1MHQSKVczRNwDC8S6xKuedjMNcQw8YOz5/view?usp=sharing
💥 Impact
Stored xss allow to executed arbitary javascript code
Occurrences
We have contacted a member of the
yourls
team and are waiting to hear back
2 years ago
Plz validate this report .
If you need more info then let me know
to join this conversation