yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in arbitrary path handling.
{ "nvd_published_at": "2021-09-15T12:15:00Z", "github_reviewed_at": "2021-09-16T18:19:29Z", "severity": "MODERATE", "github_reviewed": true, "cwe_ids": [ "CWE-79" ] }