Skip to content
OpenAdvisories

Package · Packagist

topthink/framework

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-34467

    ThinkPHP Cross-Site Scripting Vulnerability

    ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.

    topthink/framework Packagist
  • Medium 4.0
    CVE-2022-25481

    Exposure of Resource to Wrong Sphere in ThinkPHP Framework

    ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an inte…

    topthink/framework Packagist