CVE-2026-73362 Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions

Description

Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
URL Shortify 2.5	earliest → 2.5.0	No fix stated

Other CVEs of URL Shortify

The 3 CVEs of URL Shortify →

CVE-2026-25385 Server-Side Request Forgery (SSRF) vulnerability in KaizenCoders URL Shortify url-shortify allows Server Side Request… 5.5 Medium CVE-2025-32134 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders URL… 5.9 Medium