9 matches found
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
Design/Logic Flaw
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
CVE-2018-10704 affects yidashi yii2cmf 2.0 and is described as an XSS vulnerability triggered via the /search q parameter. The connected documents corroborate XSS in yii2cmf 2.0, but explicit details such as whether the flaw is stored vs reflected, affected versions beyond 2.0, or concrete remedi...
PT-2020-8516
Name of the Vulnerable Software and Affected Versions: yidashi yii2cmf version 2.0 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs via the "/search" API endpoint, specifically through the q parameter. This allows for potential malicious script injection...
