What is GHSA-gqr4-cvf4-3957?

GHSA-gqr4-cvf4-3957 is a security advisory published by GitHub Security Advisories with Medium severity. YiiCMS Cross Site Scripting vulnerability

Which CVE IDs does GHSA-gqr4-cvf4-3957 cover?

GHSA-gqr4-cvf4-3957 covers the following CVE IDs: CVE-2020-21246. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gqr4-cvf4-3957?

GHSA-gqr4-cvf4-3957 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-gqr4-cvf4-3957?

GHSA-gqr4-cvf4-3957 affects 1 product, including: composer/sheng/yiicms:\u003c 1.2.1.

GHSA-gqr4-cvf4-3957MediumCVSS 5.4

YiiCMS Cross Site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

June 20, 2023

Last Modified

December 10, 2024

🔗 CVE IDs covered (1)

CVE-2020-21246 →

📋 Description

Cross Site Scripting vulnerability in YiiCMS v.1.2.0 and prior allows a remote attacker to execute arbitrary code via the news function.

🎯 Affected products1

composer/sheng/yiicms:< 1.2.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-21246
https://github.com/yongshengli/yiicms/issues/6
https://github.com/yongshengli/yiicms/commit/4a9d68564eb78d9f64e3f5dd77186a154093615b
https://github.com/advisories/GHSA-gqr4-cvf4-3957