lll
Results
2
issues of
lll
There is a storage XSS vulnerability in the guest TOP10 of jfinal_cms. TOP10 will display the ip of the user, but it can be modified by X-Forwarded-For, where the attacker...
改1502行 if name not in s2_list: 为 if name not in s2_dict: 即可