Skip to content

Vendor

yii software vulnerabilities

1 published CVE affecting yii software, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of yii software alerts

Products

Latest yii software CVEs

Newest publication first

  1. CVE-2017-7271 Yii Framework Reflected XSS

    Published
    MediumCVSS 6.1 EPSS 1.0%

    Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.