Executive brief
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Affected products
- Packagist yiisoft/yii2
Junglewise Threat Intelligence
CVE-2024-32877: Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
CVE-2024-32877 · Severity: low · CVSS 3.1 · Published 2024-06-02
Technologies: yiisoft/yii2 (Packagist). Vendors: Packagist.
Related threats
- Yii 2 Local File Inclusion in View rendering
- yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key
- Unsafe Reflection in base Component class in yiisoft/yii2
- Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
- Withdrawn: SQL injection in Yii 2