CVE-2025-32027
Yii does not prevent XSS in scenarios where fallback error renderer is used
Summary
Yii does not prevent XSS in scenarios where fallback error renderer is used
Original description
The description as published by the source.
Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com