Description
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | yii2mod/yii2-cms | < 1.9.2 | 1.9.2 | GHSA-rfh8-25h9-mhgf |
Medium · 6.1
CVE-2019-16130
EUVD-2019-0714GHSA-rfh8-25h9-mhgf
Cross-site Scripting in YII2-CMS
Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre