Login Request a demo
YI
Product
Yii
by yiiframework · last CVE Apr 10, 2025
On CISA KEVExploited in the wild
19
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 11High 2Medium 6Low 0
Severity
All severities19Critical11High2Medium6Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Yii to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-32027
6.1
0%
Apr 10
Yii does not prevent XSS in scenarios where fallback error renderer is used
Affected: before 1.1.31
CVE-2022-31454
6.1
0%
Jul 28
Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books
Affected: 2.0.45
CVE-2017-11516
6.1
1%
Jul 21
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because…
Affected: 2.0.12
CVE-2018-20745
5.9
1%
Jan 28
Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could…
Affected: 2.0 through 2.0.15.1
CVE-2021-3692
5.3
2%
Aug 10
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
Affected: 2.0.0 before 2.0.43
CVE-2024-32877
4.7
0%
May 30
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Affected: 2.0.49.3
Showing 6