medium6.1
CVE-2018-10704
Cross-site Scripting in yii2cmf
Impact
yidashi yii2cmf 2.0 has XSS via the /search q parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | yidashi/yii2cmf | <= 2.0 | 2.0.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yii2cmf Project | Yii2cmf | Version 2.0 |