← Database

CVE-2025-32027

MEDIUM CVSS: 6.1 Published: 2025-04-10 Modified: 2026-06-17

Description

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.

Affected Platforms

Yiiframework Yii

Weakness Type

CWE-79, CWE-80, CWE-79

References