Description
A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the word parameter.
Medium · 6.1
CVE-2024-33101
EUVD-2024-30846GHSA-w34f-r3qw-xm2v
A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitra…
Published Apr 30, 2024 · Updated Aug 2, 2024 · Assigned by mitre