Description
Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simple Popup Newsletter Cross-Site Scripting (1.4.7)
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0471)
WordPress Plugin Theme Test Drive Multiple Vulnerabilities (2.9)
Joomla Incorrect Authorization Vulnerability (CVE-2010-1435)
Django URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-14574)