renren-security 代码注入漏洞

renren-security is a lightweight, front-end and back-end separated Java rapid development platform open source by renrenio. A code injection vulnerability exists in renren-security version 5.4.0 and earlier, which stems from cross-site scripting in JSON Handler...