ThinkPHP Cross-Site Scripting Vulnerability · CVE-2024-34467 · GitHub Advisory Database · GitHub

ThinkPHP Cross-Site Scripting Vulnerability

Moderate severity GitHub Reviewed Published May 4, 2024 to the GitHub Advisory Database • Updated Jun 12, 2024

Package

topthink/framework (Composer)

Affected versions

>= 8.0.0, < 8.0.4

>= 6.1.0, < 6.1.5

< 6.0.17

Patched versions

8.0.4

6.1.5

6.0.17

Description

ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.

References

Published by the National Vulnerability Database

May 4, 2024

Published to the GitHub Advisory Database May 4, 2024

Reviewed May 6, 2024

Last updated Jun 12, 2024