CVE-2018-12290: Yii2-StateMachine extension for Yii2 XSS… – CVSS 6.1 · Watchpost