An enterprise application based on yii2 basic template

CVE History

CVEPublishedCVSS v2CVSS v3
CVE-2019-161306.1 MEDIUM4.3 MEDIUM
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.