CNZZ webmaster statistics reflected Xss vulnerability and repair

Author: Love Letter construction triggers reflective Xss attack conditions:
Add the cnzz statistics code to the website, and submit the <script> alert (QingShu) </script>
Example: http://www.bkjia.com /? Post = 284 <script> alert (QingShu) </script>
Then log on to cnzz statistics. When the user accesses the website, the xss attack is triggered when the access details page is accessed.

Or submit get submission: http://new.cnzz.com/v1/main.php? Siteid = your statistics code ID & s = ipsearch

Fix: Filter