Yii@* Security Vulnerabilities and Issues — Yii@* CVE List

Lucene search

YiisoftYii*

3 matches found

CVE•added 2023/11/14 9:15 p.m.•101 views

CVE-2023-47130

Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE) if the application calls unserialize() on arbitrary user input. An attacker may leverage this vulnerability to compromise the host system. A fix has been developed for the 1.1.29...

9.8CVSS9.2AI score0.03255EPSS

CVE•added 2022/11/23 6:15 p.m.•77 views

CVE-2022-41922

yiisoft/yii before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls unserialize() on arbitrary user input. This has been patched in 1.1.27.

9.8CVSS9.2AI score0.02305EPSS

CVE•added 2025/04/10 3:16 p.m.•43 views

CVE-2025-32027

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.

6.1CVSS6.1AI score0.00039EPSS