EUVD-2021-1364

Malware in sbrugna...

CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

GHSA-MVRG-5C4W-7QV4 Cross-site Scripting in yii2cmf

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

Cross-site Scripting in yii2cmf

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

Design/Logic Flaw

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

CVE-2018-10704

CVE-2018-10704 affects yidashi yii2cmf 2.0 and is described as an XSS vulnerability triggered via the /search q parameter. The connected documents corroborate XSS in yii2cmf 2.0, but explicit details such as whether the flaw is stored vs reflected, affected versions beyond 2.0, or concrete remedi...

PT-2020-8516

Name of the Vulnerable Software and Affected Versions: yidashi yii2cmf version 2.0 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs via the "/search" API endpoint, specifically through the q parameter. This allows for potential malicious script injection...

CVE-2018-10704: Improper Neutralization of Input During Web Page Generation

yidashi yii2cmf 2.0 has XSS via the /search q parameter...