Yii Framework Cross-Site Scripting Vulnerability

Yii Framework is a component-based , high-performance PHP framework for developing large-scale Web applications . A cross-site scripting vulnerability exists in versions of Yii Framework prior to 2.0.4 that allows remote attackers to inject arbitrary web script or HTML via vector-related JSON...