Skip to content
OpenAdvisories

Package · Packagist

thinkcmf/thinkcmf

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-40489

    ThinkCMF Cross Site Request Forgery (CSRF) vulnerability

    ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.

    thinkcmf/thinkcmf Packagist