yii
Security Risk Profile
47
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2025 to present
4
Total CVEs
1
Critical+High
2
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
47/100
medium
⚠️ 2 Active Exploits⚡ 2 Zero-Days
Severity Distribution
Critical
1High
0Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
1
2
Code Injection
1
Most Affected Products
1. Craft CMS Craft CMS3
2. Yiiframework Yii3
3. Yii Yii 2 Redis extension1
4. composer/yiisoft/yii2-redis1
5. Yiiframework Yii2-redis1
Recent Vulnerabilities
See more →CVE-2025-48493
CVSS 6.5EPSS 0%medium
Yii 2 Redis may expose AUTH paramters in logs in case of connection failure
6/5/2025
https://www.bleepingcomputer.com/news/security/craft-cms-rce-exploit-chain-used-in-zero-day-attacks-to-steal-data/
unknown
Craft CMS RCE exploit chain used in zero-day attacks to steal data
4/25/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2025-32027
CVSS 6.1EPSS 0%medium
Yii does not prevent XSS in scenarios where fallback error renderer is used
4/10/2025
CVE-2024-58136
CVSS 9.8critical
Yiiframework Yii Improper Protection of Alternate Path Vulnerability
4/10/2025⚠ Exploited⚡ Zero-Day
Monitor yii in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.