Yiiframework

Records29All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Yiiframework records in CISA KEV

Products in the NVD configurations · select one to filter the records

2 records in Gii · all components

TI-2020-18848 CVE-2020-36655 · GHSA-3mpg-q26j-83j5

HIGH 73

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01524 Published 2023-01-21 Fixed in 2.2.2 CWE-94

TI-2022-15209 CVE-2022-34297 · GHSA-x87m-36g7-6mpw

LOW 25

Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00638 Published 2022-12-09 No fix listed CWE-79