Description
Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | yiisoft/yii2-gii | <= 2.2.4 | — | GHSA-x87m-36g7-6mpw |
Medium · 5.4
CVE-2022-34297
EUVD-2022-7771GHSA-x87m-36g7-6mpw
Yii2 Gii Cross-site Scripting vulnerability
Published Dec 9, 2022 · Updated Apr 22, 2025 · Assigned by mitre