medium5.4
CVE-2020-29315
Cross-site scripting in ThinkAdmin
Impact
ThinkAdmin version v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | zoujingli/thinkadmin | < 6.0.22 | 6.0.22 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkadmin | Thinkadmin | Versions 1.0, 6.0 |