Yyii2-starter-kit

Products

Exploited and recent CVEs

• CVE-2026-103476 Medium 5.3 yii2-starter-kit through 4.2.0 Unauthorized File Download via attachment-download 0.3%
• CVE-2026-103475 Critical 9.1 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure 0.4%
• CVE-2026-103474 High 8.8 yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE 0.4%