CVE-2025-32027 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is…
Medium CVSS: 6.1

CVE-2025-32027

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.
Vendor
Yiiframework
Product
Yii
CWE
CWE-79
Yayın Tarihi
2025-04-10 15:16:05
Güncelleme
2025-09-17 18:30:17
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Yii MEDIUM Yiiframework 2025

Referanslar

https://github.com/yiisoft/yii/commit/d386d737861c9014269b7ed8c36c65eadb387368 https://github.com/yiisoft/yii/security/advisories/GHSA-7r2v-8wxr-3ch5