CVE-2025-32027

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-04-10

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.

Affected Platforms (CPE)

📦

Yiiframework

Yii

< 1.1.31

References & Advisories

🔗 https://github.com/yiisoft/yii/commit/d386d737861c9014269b7ed8c36c65eadb387368

🔗 https://github.com/yiisoft/yii/security/advisories/GHSA-7r2v-8wxr-3ch5

Vulnerability Description

Affected Platforms (CPE)

Yii

References & Advisories

相关漏洞威胁