4 matches found
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
6.1CVSS6.9AI score0.00707EPSS
SaveExploits1References1
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
6.1CVSS6.4AI score0.00707EPSS
SaveExploits1References1
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
6.3AI score0.00707EPSS
SaveExploits1References1
CVE-2018-12290
The CVE-2018-12290 entry concerns the Yii2-StateMachine extension for Yii2 (v2.x.x). Technical details in connected mappings confirm a cross-site scripting (XSS) vulnerability within this extension. The root cause is improper input handling leading to script injection in the Yii2-StateMachine cod...
6.1CVSS6.3AI score0.00707EPSS
SaveExploits1References1Affected Software1
20