CVE-2015-3397 | BDVDB-2026-69439 Detail

Description#

Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and Internet Explorer 6 or 7.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/74663
http://www.yiiframework.com/news/86/yii-2-0-4-is-released/
https://github.com/yiisoft/yii2/blob/2.0.4/framework/CHANGELOG.md

Exploit#

No public exploit known

History#

Version 12015-05-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.