CVE-2018-15130: Thinksaas

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter.

Affected products

• Thinksaas Thinksaas: up to and including 2.6

Published 2018-08-07. Last modified 2026-06-17.