CVE-2022-34297

MEDIUM CVSS: 5.4 Published: 2022-12-09 Modified: 2026-06-17

Description

Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.

Affected Platforms

Yiiframework Gii

Weakness Type

CWE-79, CWE-79

References