Yiicms Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Yiicms Project records in CISA KEV

No Yiicms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2020-14021 CVE-2020-21246 · GHSA-gqr4-cvf4-3957

LOW 25

Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00553 Published 2023-06-20 Fixed in 1.2.1 CWE-79