Niushop_b2c Wchat.php file has xml entity injection vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . Niushopb2c official version 1.0 of the Wchat.php file exists xml entity injection vulnerability , due to t...