Medium severity5.3NVD Advisory· Published Jul 8, 2021· Updated Jun 17, 2026
CVE-2020-18741
CVE-2020-18741
Description
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."
Affected products
2- ThinkSAAS/ThinkSAASdescription
Patches
Vulnerability mechanics
References
1- github.com/thinksaas/ThinkSAAS/issues/19nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.