[HIGH] YOURLS has stored XSS in referrer statistics chart via crafted Referer header

PKSA-v9p2-y9c7-y991 CVE-2026-63135 GHSA-5h77-88j3-r659

Affected package: yourls/yourls

Affected version: >=1.5.1,<=1.10.3

Reported by:
GitHub