Описание
YiiCMS Cross Site Scripting vulnerability
Cross Site Scripting vulnerability in YiiCMS v.1.2.0 and prior allows a remote attacker to execute arbitrary code via the news function.
Пакеты
Наименование
sheng/yiicms
composer
Затронутые версииВерсия исправления
< 1.2.1
1.2.1
Связанные уязвимости
CVSS3: 5.4
nvd
больше 2 лет назад
Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function.