CRITICAL9.8
GHSA-75fm-52mm-q5rm
ThinkPHP SQL injection vulnerability
Details
In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/topthink/framework
No fixed version published yet for topthink/framework (composer). Pin to a known-safe version or switch to an alternative.