Description
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | yiisoft/yii | >= 1.1.14, < 1.1.15 | 1.1.15 | GHSA-74qv-rv53-5wcx |