51CTO Weibo persistent XSS

BKJIA Weibo activity XSS (the last time I sent XSS + CSRF 51cto indeed to less rank with 51cto said after all want to give me more rank back hee) Launch an activity http://t.51cto.com/index.php? M = event. modify & eid = 5 replace the packet with event_pic with the cross-site code event_pic = <script> alert (document. cookie) </script>
Solution: This time, I didn't insert the code to get the user cookie. If I insert it, I want... Weibo exchange is very high and the launch of interaction directly on the home page shows the http://t.51cto.com/index.php? M = event: disastrous consequences