GHSA-gqr4-cvf4-3957

YiiCMS Cross Site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-21246

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	sheng/yiicms	< 1.2.1	1.2.1

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting vulnerability in YiiCMS v.1.2.0 and prior allows a remote attacker to execute arbitrary code via the news function.

External links from the advisory. They lead to third-party sites.