Lucene search
Veracode Vulnerability DatabaseVERACODE:21460HistorySep 10, 2019 - 1:22 a.m.
Cross-site Scripting (XSS)
2019-09-1001:22:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
50.4%
weison-tech/yii2-rbac is vulnerable to cross-site scripting (XSS). The attack is possible because it does not sanitize a name filed to /contact.html via protected\core\modules\home\models\Contact.php , allowing an attacker to inject arbitrary script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| weison-tech/yii2-cms | le | 1.0.2 |
Related
nvd
nvd
CVE-2019-16130
2019-09-09 03:15:10
cve
cve
CVE-2019-16130
2019-09-09 03:15:10
prion
prion
Design/Logic Flaw
2019-09-09 03:15:00
osv
osv
CVE-2019-16130
2019-09-09 03:15:10
Cross-site Scripting in YII2-CMS
2019-10-14 21:12:08
github
github
Cross-site Scripting in YII2-CMS
2019-10-14 21:12:08
cvelist
cvelist
CVE-2019-16130
2019-09-09 02:05:24