CVE-2025-32027
Yii does not prevent XSS in scenarios where fallback error renderer is used
Résumé
Yii does not prevent XSS in scenarios where fallback error renderer is used
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com