CVE-2021-43697

CVE-2021-43697 affects the combined Workerman-ThinkPHP-Redis project. The vulnerability originates in the file Controller.class.php where the exit() call prints a message to the user and incorporates content from $_GET{C('VAR_JSONP_HANDLER')}, enabling a Cross-Site Scripting (XSS) scenario. The c...