WS-2022-0271

Modify other people's articles by modifying the data package in cherry-toto/jizhicms. The program does not check whether the originator of the request has this permission. I can modify the content of other people's articles and even modify the content by capturing data packets, even if I am not t...