VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 28, 2023· Updated Jun 17, 2026

CVE-2022-31454

CVE-2022-31454

Description

Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor because the cve-2022-31454-8e8555c31fd3 page does not describe why /books has a relationship to Yii 2.

Affected products

3
  • Yiiframework/Yii
    cpe:2.3:a:yiiframework:yii:2.0.45:*:*:*:*:*:*:*
  • Yii/Yii 2cpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =2.0.45

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.