Dancer

配置完后，开启redis，在命令行运行 webim_server.php 和 flash_policy.php，浏览器访问webroot没什么反应

After the administrator open the following page, and click the the Submit request, square message with ID 264 will be deleted. ``` history.pushState('', '', '/') ```

There is a Stored-XSS vulnerability in IceCMS v1.0.0 api : /Websquare/create/circle planet - circle POC： The payload is ``  

There is unauthorized access to the API, resulting in the disclosure of sensitive information

1

This api does not require login, obtains user information through user_id, and returns the user name, password, and email address in plain text.  It is like the preview address...