baijunyao/thinkphp-bjyblog

baijunyao/thinkphp-bjyblog

GitHubGitHub
GitHubgithub.com
baijunyao.combaijunyao.com
Releases0
Stars423
基于 ThinkPHP 开发的的 blog
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-43682↗
6.1 MEDIUM4.3 MEDIUM

thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $_SERVER['HTTP_HOST'].