CVE-2020-29315

Description

ThinkAdmin version v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.

How to fix CVE-2020-29315

To remediate CVE-2020-29315, upgrade the affected package to a fixed version below.

• Packagist/zoujingli/thinkadmin—upgrade to 6.0.22 or later

Is CVE-2020-29315 being exploited?

Low — EPSS is 1.0%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 6.0.22

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2020-29315
• PATCHgithub.com/zoujingli/ThinkAdmin
• WEBgithub.com/zoujingli/ThinkAdmin/commit/5e7c2325008d0191f941666b5589c08a070ce838
• WEBgithub.com/zoujingli/ThinkAdmin/issues/255