← All advisories

Medium severity5.4NVD Advisory· Published Dec 9, 2022· Updated Jun 17, 2026

CVE-2022-34297

CVE-2022-34297

Description

Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
yiisoft/yii2-giiPackagist	<= 2.2.4	—

Affected products

3

Yiiframework/Gii
cpe:2.3:a:yiiframework:gii:*:*:*:*:*:yii2:*:*
Range: <=2.2.4
Yii/Yii2description
ghsa-coords
pkg:composer/yiisoft/yii2-gii
Range: <= 2.2.4

Patches

Vulnerability mechanics

References

4

gist.github.com/be4r/b5c48d97ef6726d3ee37f995ee5aac81nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-x87m-36g7-6mpwghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-34297ghsaADVISORY
www.yiiframework.com/doc/guide/2.0/en/start-giinvdWEB

News mentions

0

No linked articles in our index yet.