CVE:CVE-2020-26609
CNNVD:CNNVD-202102-1522
fastadmin是一套基于ThinkPHP和Bootstrap的网站后台开发框架。
fastadmin V1.0.0.20200506_beta 存在跨站脚本漏洞，该漏洞允许攻击者获取管理员凭证登录到后台。
solution:Upgrade fastadmin fastadmin to a higher version than 1.0.0.20200506:beta,and avoid the version 1.0.0.20200506:beta