CVE-2018-5375

Discuz! DiscuzX X3.4 is affected by a cross-site scripting (XSS) vulnerability in the file path include\cp\cp_space.php, triggered by the appid parameter during a delete action. The connected documents confirm the vulnerable component/file and the vulnerability class, stating the issue directly. ...