Lucene search

K
osvGoogleOSV:GHSA-MVRG-5C4W-7QV4
HistoryJun 22, 2021 - 3:25 p.m.

Cross-site Scripting in yii2cmf

2021-06-2215:25:22
Google
osv.dev
8
cross-site scripting
yii2cmf
search parameter
software

EPSS

0.001

Percentile

32.7%

yidashi yii2cmf 2.0 has XSS via the /search q parameter.

EPSS

0.001

Percentile

32.7%

Related for OSV:GHSA-MVRG-5C4W-7QV4