Cross-site scripting vulnerability in ThinkSNS social system

ThinkSNS is an open source social networking system under Wise. A cross-site scripting vulnerability exists in the ThinkSNS social system opensourceopen source version/addons/theme/stv1/static/js/um/php/imageUp.php page. The program fails to filter user-supplied input, allowing an attacker to...