CVE-2025-32027

Publication date

2025-04-10 14:32:31

Family

GitHub_M

State

PUBLISHED

Description

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.