CVE-2025-32027

Published: 2025-04-10T15:16Z

Last Modified: 2025-04-10T15:16Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt