CVE-2021-43682 - Thinkphp-bjyblog Project Thinkphp-bjyblog

thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function will terminate the script and print the message to the user which has $_SERVER['HTTP_HOST'].

Affected software

Reference links