ThinkPHP 1.5 / 2.0 Cross Site Scripting

Title: ThinkPHP Securitylab.ir- the truly thief of Iran!! Spring Brother will blast ur Ass!!!...