EUVD-2022-3621

Malicious code in bioql PyPI...

CVE-2024-58136

Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025. Recent assessments: chutton-r7 at May 11, 2025 1:58pm UTC reported: On the April 9 2025, Yii released an advisory...

Yii 跨站脚本漏洞

Yii is a component-based, high-performance PHP framework for developing large-scale web applications developed by the YII team. A cross-site scripting vulnerability exists in Yii 2 v2.0.45, which originates from endpoint books containing cross-site scripting XSS...