Cross-site Scripting and SQL Injection Vulnerabilities in YiiCMS

YiiCMS is a backend basic content management system written based on yii2. YiiCMS suffers from a cross-site scripting and SQL injection vulnerability, which is due to the system failing to effectively filter user input. An attacker can exploit this vulnerability to insert malicious cross-site cod...