Lucene search
Veracode Vulnerability DatabaseVERACODE:38432HistoryDec 12, 2022 - 3:08 a.m.
Cross-site Scripting (XSS)
2022-12-1203:08:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cross-site scripting
yii2
generator.php
validation rules
enablei18n
messagecategory
javascript injection
EPSS
0.001
Percentile
25.0%
yiisoft/yii2-gii is vulnerable to cross-site scripting. The vulnerability exists in the rules function of Generator.php due to a lack of proper validation rules for enableI18N and messageCategory which allows an attacker to inject and execute malicious JavaScript.
Related
cvelist
cvelist
CVE-2022-34297
2022-12-09 00:00:00
osv
osv
Yii2 Gii Cross-site Scripting vulnerability
2022-12-10 00:30:17
github
github
Yii2 Gii Cross-site Scripting vulnerability
2022-12-10 00:30:17
prion
prion
Cross site scripting
2022-12-09 22:15:00
nvd
nvd
CVE-2022-34297
2022-12-09 22:15:10
cve
cve
CVE-2022-34297
2022-12-09 22:15:10