yiisoft/yii2 vulnerabilities (Packagist)
12 vulnerabilities.
yiisoft/yii2PackagistYii 2: Local file inclusion via view parameter name collision7.4 Highyiisoft/yii2Packagistyiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key9.0 Criticalyiisoft/yii2PackagistUnsafe Reflection in base Component class in yiisoft/yii28.1 Highyiisoft/yii2PackagistReflected Cross-site Scripting in yiisoft/yii2 Debug mode4.2 Mediumyiisoft/yii2PackagistYii2 allows attackers to execute any local .php file via a relative path in the view parameter9.8 Criticalyiisoft/yii2PackagistUnsafe deserialization in Yii 28.9 Highyiisoft/yii2PackagistYii Incorrectly Implements CORS5.9 Mediumyiisoft/yii2PackagistYii Framework reflected Cross-site Scripting7.5 Highyiisoft/yii2PackagistYii Framework Cross-Site Request Forgery (CSRF)8.8 Highyiisoft/yii2PackagistYii Cross-site Scripting Framework vulnerability6.1 Mediumyiisoft/yii2PackagistYii Framework Reflected XSS6.1 Mediumyiisoft/yii2PackagistYii Framework Cross-site Scripting Vulnerability4.3 Medium