CyberRota Analysis
AI-GeneratedURL Shortify versions up to 2.5.0 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to session hijacking, data theft, or redirection to malicious sites. Organizations using affected versions should prioritize remediation to protect their users and data integrity.
CVE
CVE-2026-73362
Severity
HIGH
CVSS
7.1
EPSS
0.24%
Original NVD Description
Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.