CVE-2020-29315: XSS
Published Dec 1, 2020
·Updated
ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.
Other sources
ThinkAdmin version v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.
— GitHub
Affected Software
5 affected componentsFixes available
ThinkAdmin ThinkAdmin=1.0
ThinkAdmin ThinkAdmin=6.0
Ctolog Thinkadmin=1.0
Ctolog Thinkadmin=6.0
composer/zoujingli/thinkadmin<6.0.22
6.0.22
Event History
Dec 1, 2020
CVE Published
via MITRE·04:55 PM
Data Sourced
via MITRE·04:55 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
May 6, 2021
Advisory Published
via GitHub·06:53 PM
Frequently Asked Questions
1
What is the vulnerability ID for this ThinkAdmin vulnerability?
The vulnerability ID for this ThinkAdmin vulnerability is CVE-2020-29315.
2
What is the severity of the CVE-2020-29315 vulnerability?
The severity of the CVE-2020-29315 vulnerability is medium with a CVSS score of 5.4.
3
What is the affected software for CVE-2020-29315?
The affected software for CVE-2020-29315 is ThinkAdmin version 1.0 and version 6.0.
4
What is the CWE ID for CVE-2020-29315?
The CWE ID for CVE-2020-29315 is CWE-79.
5
How can remote attackers exploit CVE-2020-29315?
Remote attackers can exploit CVE-2020-29315 by injecting an arbitrary web script or HTML.