Vulnerabilities > Yiiframework > GII > High

DATE CVE VULNERABILITY TITLE RISK
2023-01-21 CVE-2020-36655 Code Injection vulnerability in Yiiframework GII
Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field.
network
low complexity
yiiframework CWE-94
8.8