There is a stored xss vulnerability in versions (v1、v6)

[parkourhe]

An issue was discovered in ThinkAdmin version v1、v6 There is a stored XSS attacks vulnerability which allows remote attackers to inject arbitrary web script or HTML.

POC
<script>alert('test')</script>

Vulnerability trigger point
V1、V6 : http://localhost/admin.html#/admin/user/index.html?spm=m-2-12-5

1.Login

2. choose 系统管理(system management) --> 系统用户管理(User Management) --> 添加用户(Add users)

3. input Poc in the nickname and save

4.Validation complete

V6:

V1:

Maybe there are more stored XSS

[zoujingli]

v6 已经处理

[zoujingli]

v1 不再更新