CVE-2022-31454 | BDVDB-2026-208246 Detail

Description#

Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor because the cve-2022-31454-8e8555c31fd3 page does not describe why /books has a relationship to Yii 2.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://medium.com/%40rohitgautam26/cve-2022-31454-8e8555c31fd3

Exploit#

No public exploit known

History#

Version 12023-07-28Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.