CVE-2020-29315: Thinkadmin

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML.

Affected products

• Thinkadmin Thinkadmin: version 1.0 only; version 6.0 only

Published 2020-12-01. Last modified 2026-06-17.