CVE-2019-11018
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.
Published: 2019-04-08 · CVSS: Unscored
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7