NNext

Affected versions：v3.1.1 ## The steps to reproduce Register an ordinary user arbitrarily, and upload the avatar  The front-end restricts the file type, and can only upload image-type files You...

Affected versions：v3.1.1 ## The steps to reproduce When logging in, choose to forget your password and choose to retrieve your password And enter any existing email address and its bound...

In the background, XSS is inserted in the place where the friend link management is added, at the site name and website description, resulting in an XSS popup window appearing...