- Description
- Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.
- Source
- security-advisories@github.com
- NVD status
- Analyzed
- Products
- yii
CVSS 3.1
- Type
- Secondary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
- Hype score
- Not currently trending
CVE-2025-32027 Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. … https://t.co/e8vzLRJiLx
@CVEnew
10 Apr 2025
473 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
New post from https://t.co/uXvPWJy6tj (CVE-2025-32027 | yiisoft yii up to 1.1.30 cross site scripting (GHSA-7r2v-8wxr-3ch5)) has been published on https://t.co/FF7qkqTWBL
@WolfgangSesin
10 Apr 2025
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:yiiframework:yii:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EEEA2183-5092-4E23-BFE4-22F203F79C57",
"versionEndExcluding": "1.1.31",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]