~ / search / GHSA-mvrg-5c4w-7qv4

GHSA-mvrg-5c4w-7qv4

Cross-site Scripting in yii2cmf

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-10704

Packages

EcosystemPackageAffectedFixed in
Packagist yidashi/yii2cmf < 2.0.2 2.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

yidashi yii2cmf 2.0 has XSS via the /search q parameter.

References

External links from the advisory. They lead to third-party sites.