https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-0088.htmlhttps://patchthecve.com/cve/CVE-2022-0088.htmlWed, 17 Jun 2026 04:19:57 +0000HIGH 7.4: Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.https://patchthecve.com/cve/CVE-2021-3785.htmlhttps://patchthecve.com/cve/CVE-2021-3785.htmlWed, 17 Jun 2026 04:05:45 +0000MEDIUM 5.4: yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://patchthecve.com/cve/CVE-2021-3783.htmlhttps://patchthecve.com/cve/CVE-2021-3783.htmlWed, 17 Jun 2026 04:05:45 +0000MEDIUM 6.1: yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://patchthecve.com/cve/CVE-2021-3734.htmlhttps://patchthecve.com/cve/CVE-2021-3734.htmlWed, 17 Jun 2026 04:05:39 +0000HIGH 8.8: yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frameshttps://patchthecve.com/cve/CVE-2020-27388.htmlhttps://patchthecve.com/cve/CVE-2020-27388.htmlThu, 09 Jul 2026 01:16:41 +0000MEDIUM 5.4: Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.