JATOS 安全漏洞

JATOS is an online learning tool from JATOS Open Source. A security vulnerability exists in JATOS versions 3.7.1 through 3.9.6, which stems from the code parameter in the /publix/run endpoint not being filtered correctly, which could lead to a reflective cross-site scripting attack...