ThinkPHP Cross-Site Scripting Vulnerability
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-34467US | — | — | ||
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/top-think/frameworkPACKAGE
- https://github.com/top-think/framework/commit/403358cd3e510e2fdab63f951930bdd093314eeeWEB
- https://github.com/top-think/framework/commit/57d1950a1844ef8d3098ea290032aeb92e2e32c3WEB
- https://github.com/top-think/framework/commit/d3904e51e279c3b72ee206192aeccf9b1cffb534WEB
- https://github.com/top-think/framework/issues/2996WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-34467ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan