thinkphp-bjyblog (last update Jun 4 2021) is affected by...
Moderate severity
Unreviewed
Published
Dec 3, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Dec 2, 2021
Published to the GitHub Advisory Database
Dec 3, 2021
Last updated
Feb 1, 2023
thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function will terminate the script and print the message to the user which has $_SERVER['HTTP_HOST'].
References