CVE-2018-12290by Jeremyin Security Bulletinson Posted on June 13, 2018 The Yii2-StateMachine extension v2.x.x for Yii2 has XSS.