Vulnerabilities > Yiiframework

DATE CVE VULNERABILITY TITLE RISK
2017-07-21 CVE-2017-11516 Cross-site Scripting vulnerability in Yiiframework YII 2.0.12
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.
network
low complexity
yiiframework CWE-79
6.1