WorkDo CRMGo 跨站脚本漏洞

WorkDo CRMGo is a project, accounting, lead, transaction, and human resource management tool from WorkDo, Inc. A cross-site scripting vulnerability exists in WorkDo CRMGo version 7.2 and prior versions, which stems from the comment parameter in the /project/task/taskid/show file containing a...