Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-34297

Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Yiiframework
Products
Gii
CVE-2020-36655

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Yiiframework
Products
Gii