Tencent QQ space exists. XSS spoofs friends to obtain the QQ password (with process and result)

Insert the QQ space log into XSS to enable friends to open a pop-up window in their QQ space
In fact, I don't know what XSS is. I also accidentally discovered it! A pop-up window appears when a friend opens his QQ space! You can try it!
I don't know. Do you understand this? Sorry, I'm not regular !! But you can test Oh 1. I first registered an XSS receiving platform http://xss8.net/xssadmin/index.php in some of the configuration seems needless to say it !!!! 2. let's attach code 3. we want to write it into the log of the QQ space. 4. let's look at the page on which a friend opens his own space. 5. some of my friends have really entered it. What can I do !!
 Solution:

You programmers should know this !!