CVE-2020-25915: XSS
Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted userlogin.
Other sources
Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted userlogin.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25915?
The severity of CVE-2020-25915 is classified as high due to its potential to allow attackers to execute arbitrary code.
How do I fix CVE-2020-25915?
To fix CVE-2020-25915, upgrade ThinkCMF to version 5.1.6 or later, which addresses the Cross Site Scripting vulnerability.
What systems are affected by CVE-2020-25915?
CVE-2020-25915 affects ThinkCMF version 5.1.5.
What kind of attack is CVE-2020-25915 associated with?
CVE-2020-25915 is associated with Cross Site Scripting (XSS) attacks that can allow arbitrary code execution.
Is user input vulnerable in CVE-2020-25915?
Yes, user input processed by the UserController.php in ThinkCMF version 5.1.5 is vulnerable to exploitation in CVE-2020-25915.