Packagist/sheng/yiicms CVE-2020-21246: medium 5.4, EPSS 0.55%
YiiCMS Cross Site Scripting vulnerability
Action: Upgrade sheng/yiicms to 1.2.1 or later.
composer require sheng/yiicms:1.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.1 | - |
Fixed versions
| 1.2.1 |
Sources
- osv: GHSA-gqr4-cvf4-3957
- https://nvd.nist.gov/vuln/detail/CVE-2020-21246
- https://github.com/yongshengli/yiicms/issues/6
- https://github.com/yongshengli/yiicms/commit/4a9d68564eb78d9f64e3f5dd77186a154093615b
- https://github.com/yongshengli/yiicms
CVE-2020-21246 · published · modified · JSON