极致网络科技 JIZHICMS 跨站脚本漏洞

JIZHICMS Extreme CMS is an open source, free, commercial license-free website building system. A cross-site scripting vulnerability exists in Home/c/WechatController.php in JIZHICMS 1.7.1. An attacker can inject arbitrary Web script or HTML via index.php/Wechat/checkWeixin?signature=1&echostr=XSS...