https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:28:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-232910 EUVD-2026-232910 https://cve.radiocsirt.org/vuln/euvd-2026-232910 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34297 <p>Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.</p> <p>Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34297 https://cve.radiocsirt.org/vuln/ghsa-x87m-36g7-6mpw <p><strong>Affected:</strong> Packagist: yiisoft/yii2-gii</p> <p>Some fields like Message Category (requires I18N enabled) in Model Generator, CRUD Generator or Form Generator, Author Name in Extension Generator, etc. are being cached without sanitisation of their contents when the Preview button is pressed. This leads to possibility of injecting malicious javascript in specified pages by placing it in said fields and caching it by pressing Preview button. On each consequent visit of specified pages malicious javascript will be loaded from server and executed in client&#39;s browser.</p> <p><strong>Affected:</strong> Packagist: yiisoft/yii2-gii</p> <p>Some fields like Message Category (requires I18N enabled) in Model Generator, CRUD Generator or Form Generator, Author Name in Extension Generator, etc. are being cached without sanitisation of their contents when the Preview button is pressed. This leads to possibility of injecting malicious javascript in specified pages by placing it in said fields and caching it by pressing Preview button. On each consequent visit of specified pages malicious javascript will be loaded from server and executed in client&#39;s browser.</p> https://cve.radiocsirt.org/vuln/ghsa-x87m-36g7-6mpw https://cve.radiocsirt.org/vuln/gsd-2022-34297 gsd-2022-34297 https://cve.radiocsirt.org/vuln/gsd-2022-34297