[MEDIUM] YiiCMS Cross Site Scripting vulnerability

PKSA-wfnp-347k-y8w4 CVE-2020-21246 GHSA-gqr4-cvf4-3957

Affected version: <=1.2.0

Reported by:
GitHub