4 matches found
Yii Cross-site Scripting Framework vulnerability
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception-errorInfo is mishandled...
6.1CVSS6.1AI score0.00832EPSS
SaveExploits0References4Affected Software2
Cross-site Scripting (XSS)
yiisoft/yii2 is vulnerable to cross-site scripting XSS.When debug mode is enabled, the $exception-errorInfo is mishandled, allowing attackers to execute XSS attacks...
6.1CVSS5.9AI score0.00832EPSS
SaveExploits0References1Affected Software1
20