medium6.1
CVE-2019-16130
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.
Impact
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgw168cc | Yii-Cms | Version 1.0 |