CVE-2025-32027

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-32027
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-32027.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-32027
Aliases
Published
2025-04-10T15:16:05Z
Modified
2025-04-11T19:46:11.682642Z
Summary
[none]
Details

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.

References

Affected packages

Git / github.com/yiisoft/yii

Affected ranges

Type
GIT
Repo
https://github.com/yiisoft/yii
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d386d737861c9014269b7ed8c36c65eadb387368

Affected versions

1.*

1.0a
1.0rc
1.1.0
1.1.10
1.1.11
1.1.12
1.1.13
1.1.13-RC
1.1.14
1.1.14-rc
1.1.15
1.1.16
1.1.17
1.1.18
1.1.19
1.1.20
1.1.21
1.1.22
1.1.23
1.1.24
1.1.25
1.1.26
1.1.27
1.1.28
1.1.29
1.1.3
1.1.30
1.1.4
1.1.7
1.1.8
1.1.9
1.1b
1.1rc