GHSA-v47f-vp3p-5j6h
Cross-site scripting in ThinkAdmin
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | zoujingli/thinkadmin | < 6.0.22 | 6.0.22 |
Details
As written in the advisory (Markdown source, shown as plain text).
ThinkAdmin version v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.
References
External links from the advisory. They lead to third-party sites.