A security fix for the Yii framework was released on 29th June: http://www.yiiframework.com/news/78/yii-1-1-15-is-released-security-fix/
The issue only affects the CDetailView component of Version 1.1.14, and can be upgraded safely without breaking existing code.
