Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
yidashi yii2cmf 2.0 has XSS via the /search q parameter.
Advisories for Composer/Yidashi/Yii2cmf package
2021
yidashi yii2cmf 2.0 has XSS via the /search q parameter.