emlog 跨站脚本漏洞

emlog is emlog open source a PHP and MySQL based CMS site building system. A cross-site scripting vulnerability exists in emlog version 2.5.13, which originates from the unvalidated perpagenum parameter in /admin/comment.php, and could lead to a stored cross-site scripting attack...