CVE-2024-34467

2024-05-0400:00:00

mitre

github.com

thinkphp 8.0.3

xss vulnerability

think_exception.tpl

inadequate filtering

remote attackers

exploit

AI Score

6.1

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:thinkphp:thinkphp:-:*:*:*:*:*:*:*"
    ],
    "vendor": "thinkphp",
    "product": "thinkphp",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]