Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-82579
HistoryMar 31, 2022 - 12:00 a.m.

Pear Admin Think Cross-Site Scripting Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
cross-site scripting
thinkphp6
data validation
user-supplied data
login accounts
arbitrary functions
stored xss
pseudo-user agent
vulnerability

EPSS

0.001

Percentile

24.8%

Pear Admin Think is a rapid development platform based on thinkphp6 that allows you to quickly build your functional business with simple code generation functionality. pear Admin Think 5.0.6 and prior versions contain a cross-site scripting vulnerability that stems from the program’s lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to allow login accounts to access arbitrary functions and cause stored XSS via a pseudo-user agent.

EPSS

0.001

Percentile

24.8%

Related for CNVD-2022-82579