CVE-2019-16130 - YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html

MEDIUM

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html

Published Sep 9, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 0.93%

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
http://www.iwantacve.cn/index.php/archives/277/		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-0714		Advisory
https://github.com/advisories/GHSA-rfh8-25h9-mhgf		Advisory
https://github.com/weison-tech/yii2-cms/issues/2		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16130