Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/13 1:20 a.m.55 views

GHSA-8GFQ-C54M-3RF6 Yii Framework reflected Cross-site Scripting

In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in non-debug mode. Related to base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php...

7.5CVSS7.1AI score0.02859EPSS
SaveExploits0References7
Rows per page
Query Builder