Executive brief
Yii does not prevent XSS in scenarios where fallback error renderer is used
Affected products
- Packagist yiisoft/yii
Junglewise Threat Intelligence
CVE-2025-32027: Yii does not prevent XSS in scenarios where fallback error renderer is used
CVE-2025-32027 · Severity: low · CVSS 3.1 · Published 2025-04-11
Technologies: yiisoft/yii (Packagist). Vendors: Packagist.