4 matches found
CVE-2022-34297
Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field...
5.4CVSS5.8AI score0.00607EPSS
SaveExploits1References1
CVE-2022-34297
Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field...
5.4CVSS0.00607EPSS
SaveExploits1References3
CVE-2022-34297
Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field...
6AI score0.00607EPSS
SaveExploits1References1
CVE-2022-34297
CVE-2022-34297 affects the Yii2 Gii tool in Yii2 up to version 2.2.4. The vulnerability is a stored XSS that can be triggered by injecting a payload into any field managed by Gii, enabling attacker-controlled script execution in the affected application. The provided documents consistently descri...
5.4CVSS5.2AI score0.00607EPSS
SaveExploits1References3Affected Software1
20