Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4650
HistoryJul 25, 2017 - 2:46 a.m.

Cross-site Scripting (XSS)

2017-07-2502:46:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.001 Low

EPSS

Percentile

29.5%

yiisoft/yii2 is vulnerable to cross-site scripting (XSS).When debug mode is enabled, the $exception->errorInfo is mishandled, allowing attackers to execute XSS attacks.

CPENameOperatorVersion
yiisoft/yii2eq2.0.12.2

0.001 Low

EPSS

Percentile

29.5%

Related for VERACODE:4650