-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| yiisoft/yii2-gii | composer | <= 2.2.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from unsanitized user input being cached during the Preview action. The Generator::load() method is directly responsible for handling and storing form data, while DefaultController::actionPreview() initiates this process. Both functions lack input sanitization before caching, making them the root cause. The confidence is high because these components are central to Gii's form handling and caching workflow, as described in the advisory.