Discuz! Stored XSS

Test Method



 

Where you leave a message, you can do anything that JS can do (here I want to thank Return for help)


 

 

How can I log on when I steal cookies? I did not study it either. A few of my friends did not study it for a long time.

I sent a forum to help you find the login method and try to dig deeper.

Iii. solution:
Go to the backend> User Management> user group> click details of each level and select "/>" if credit transfer is allowed. Then, confirm.

Yang Fan gave you a solution. Another solution was paid by the founder of the network knife.