CVE-2020-21246

YiiCMS contains a Cross-Site Scripting vulnerability in version 1.0 (and affecting 1.2.0 and prior) where a malicious user can exploit the NEWS function to execute arbitrary code. The issue is documented across multiple sources (NVD entry CVE-2020-21246, CNVD, GHSA, OSV, GitHub advisories, Red Ha...