CVE-2018-10704

Description

yidashi yii2cmf 2.0 has XSS via the /search q parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/yidashi/yii2cmf ↗
• http://testh5shanglv.minshengec.com:1024/phpmyadmin/doc/yii2cmf_xss.htm ↗