# 在优客365的2.9版本,网站提交处的信息输入存在存储型XSS
## `./member/?mod=website&act=add` 存在存储型xss
![](https://images.seebug.org/contribute/4c9e8235-9e5a-4a90-b021-cabb80400240-w331s)
![](https://images.seebug.org/contribute/5904b653-6b8c-4187-bac3-69d7d9e3b59e-w331s)
![](https://images.seebug.org/contribute/2cbdf45a-93bd-4976-bdd9-b0662928a907-w331s)
![](https://images.seebug.org/contribute/35804bc6-f34f-47ff-82e8-097b4b55f3f0-w331s)
## 问题代码在`./member/module/website.php`
![](https://images.seebug.org/contribute/fadbde2c-a219-4bd9-bc63-d76261aa4a81-w331s)
![](https://images.seebug.org/contribute/21d5f459-e554-4f97-83fd-cb77478bef68-w331s)
![](https://images.seebug.org/contribute/361c74c2-07d5-49b1-9473-2735f2f30def-w331s)
### 由图可见,`filter_words`没有进行过滤
暂无评论