CVE-2024-32877

CVE-2024-32877 (Yii2): The vulnerability affects Yii2 (2.0.49.3) via the stack-trace display mechanism, where argument values longer than 32 characters are truncated but the full value is exposed in the title attribute. A double quote (") can break out of the title context and inject attributes (...