CVE-2019-16130

weison-tech/yii2-cms
on github

Published

Severity

CVSS v3:
6.1 MEDIUM
CVSS v2:
4.3 MEDIUM

Description

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.

References

Configurations

CPE23Version StartVersion EndExact Version
cpe:2.3:a:hgw168cc:yii-cms:1.0:*:*:*:*:*:*:*n/an/a1.0

External Links