Description
ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | topthink/framework | >= 8.0.0, < 8.0.4 | 8.0.4 | GHSA-969f-v7jv-pgj3 |
| Packagist | topthink/framework | >= 6.1.0, < 6.1.5 | 6.1.5 | GHSA-969f-v7jv-pgj3 |
| Packagist | topthink/framework | < 6.0.17 | 6.0.17 | GHSA-969f-v7jv-pgj3 |