CVE-2020-25915보통 5.4Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via cra…
CVE-2022-40849보통 5.4ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inj…
CVE-2022-40489높음 8.8ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injecte…
CVE-2021-40616보통 6.5thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the b…
CVE-2020-20601심각 9.8An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.