CVE-2021-43682

thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php

published December 2, 2021

CVSS
—
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $_SERVER['HTTP_HOST'].

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00574 · 46.6th percentile
Published
2021-12-02T13:37Z
EPSS history
Timeline
  • 02 DEC 13:37Z
    thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php
    cvelistv5