Description
Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted user_login.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | thinkcmf/thinkcmf | < 5.1.7 | 5.1.7 | GHSA-4847-gqxx-v9xp |