{"id":"GHSA-65qg-f77j-cccf","aliases":["CVE-2018-12290"],"title":"Yii2-StateMachine extension for Yii2 XSS Vulnerability","description":"The Yii2-StateMachine extension v2.x.x for Yii2 has XSS.","severity":"medium","score":6.1,"published":"2022-05-14T03:10:52.000Z","modified":"2024-02-16T08:13:47.229Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"ptheofan/yii2-statemachine","ranges":[{"events":[{"introduced":"2.0.0-RC1"},{"last_affected":"2.0.0"}],"type":"ECOSYSTEM"}],"versions":["v2.0.0","v2.0.0-RC1"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2018-12290","https://github.com/ptheofan/yii2-statemachine","https://web.archive.org/web/20180624194633/http://www.iwantacve.cn/index.php/archives/40"],"sources":[{"name":"OSV","id":"GHSA-65qg-f77j-cccf","modified":"2024-02-16T08:13:47.229189Z","url":"https://osv.dev/vulnerability/GHSA-65qg-f77j-cccf"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","score":6.1}]}