{"action":"Upgrade yiisoft/yii2 to 2.0.11 or later.","affected":[{"fixed":"2.0.11","introduced":"0"}],"component":"yiisoft/yii2","cve_ids":["CVE-2017-7271"],"ecosystem":"Packagist","epss":0.01042,"exploited":false,"fixed_versions":["2.0.11"],"ghsa_id":"GHSA-4xh9-5vh8-3p58","id":"tcs_01M5KEVEV87JSGAYWGHAVX7QJ7","modified_at":"2024-02-16T08:20:48.136383Z","published_at":"2022-05-17T02:46:54Z","references":["https://osv.dev/vulnerability/GHSA-4xh9-5vh8-3p58","https://nvd.nist.gov/vuln/detail/CVE-2017-7271","https://github.com/yiisoft/yii2/pull/13401","https://github.com/yiisoft/yii2/commit/97171a0db7cda0a49931ee0c3b998ef50bd06756","https://github.com/yiisoft/yii2","https://web.archive.org/web/20210125191138/http://www.securityfocus.com/bid/97167","http://www.yiiframework.com/news/123/yii-2-0-11-is-released"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4xh9-5vh8-3p58","url":"https://osv.dev/vulnerability/GHSA-4xh9-5vh8-3p58"}],"summary":"Yii Framework Reflected XSS"}