What is GHSA-v47f-vp3p-5j6h?

GHSA-v47f-vp3p-5j6h is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site scripting in ThinkAdmin

Which CVE IDs does GHSA-v47f-vp3p-5j6h cover?

GHSA-v47f-vp3p-5j6h covers the following CVE IDs: CVE-2020-29315. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v47f-vp3p-5j6h?

GHSA-v47f-vp3p-5j6h has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-v47f-vp3p-5j6h?

GHSA-v47f-vp3p-5j6h affects 1 product, including: composer/zoujingli/thinkadmin:\u003c 6.0.22.

GHSA-v47f-vp3p-5j6hMediumCVSS 5.4

Cross-site scripting in ThinkAdmin

Vendor

GitHub Security Advisories

Published

May 6, 2021

Last Modified

May 15, 2025

🔗 CVE IDs covered (1)

CVE-2020-29315 →

📋 Description

ThinkAdmin version v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.

🎯 Affected products1

composer/zoujingli/thinkadmin:< 6.0.22

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-29315
https://github.com/zoujingli/ThinkAdmin/issues/255
https://github.com/zoujingli/ThinkAdmin/commit/5e7c2325008d0191f941666b5589c08a070ce838
https://github.com/advisories/GHSA-v47f-vp3p-5j6h