CRITICAL9.8
GHSA-qv5j-rwq3-m823
ThinkAdmin Administrator cookies still working after password change
Details
`application\admin\controller\User.php` in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/zoujingli/thinkadmin
No fixed version published yet for zoujingli/thinkadmin (composer). Pin to a known-safe version or switch to an alternative.