Approved changes feed: RSS · Atom

cpe:2.3:a:thinkphp-bjyblog_project:thinkphp-bjyblog:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorThinkphp Bjyblog Project (1b07a88e-c42d-5c43-afda-d137fcf58eeb)
ProductThinkphp Bjyblog (32fe2a2f-a8e7-5b32-ba11-fcc3059abd4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/baijunyao/thinkphp-bjyblog purl2cpe 2026-06-01 10:16:52.629890
pkg:github/hujianli94/thinkphp-bjyblog purl2cpe 2026-06-01 10:16:52.629893
pkg:github/kkmrtan/thinkphp-bjyblog purl2cpe 2026-06-01 10:16:52.629896

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43682 vulnerable 2026-06-08 05:36:43.698706 Details available
thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $_SERVER['HTTP_HOST'].
Published: 2021-12-02T13:37:13.000Z
Updated: 2024-08-04T04:03:08.626Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.