An issue was discovered in ThinkSAAS 2.91. There is XSS via the index.php?app=group&ac=create&ts=do groupname parameter.

Published Sep 21, 2019 · Updated Aug 5, 2024 · Assigned by mitre