Security Advisory

CVE-2025-32027

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-10 14:32:31
Last updated 2025-04-10 14:54:23
Assigner GitHub_M
State PUBLISHED

Description

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.