YxcmsAPP V1.4.3 Stored Cross-site Scripting Vulnerability at Frontend Guestbook

Yxcms is an enterprise building system based on PHP and mysql technology. YxcmsAPP V1.4.3 stored cross-site scripting vulnerability in the front-end guestbook. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user hijacking...