What’s Vulnerable › Vulnerabilities

CVE-2021-43682

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-12-02 · updated 2026-06-17
• Weakness: CWE-79

Description

thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $_SERVER['HTTP_HOST'].

Affected products

• Thinkphp-Bjyblog Project Thinkphp-Bjyblog: all versions

References

• https://github.com/baijunyao/thinkphp-bjyblog/issues/6
• https://github.com/baijunyao/thinkphp-bjyblog/issues/6

Get alerted when CVE-2021-43682 or the next vulnerability affects your stack