CVE-2020-21246 Information

Description

Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function.

Reference

https://github.com/yongshengli/yiicms/issues/6