Tencent Weibo storage XSS

Is there a problem with the release of the 2013 release version ~ This is a problem of micro-sphere. Please add XSS code in the personal signature section of my account t.qq.com/CaoYebo1999 (please listen to QQ Security Center, please worship you, <iframe/onload = alert (1)> after listening to the t.qq.com/testxssflash account, we will find that my account is in "someone similar to him". At the same time, XSS code is inspired
The window is displayed successfully. that is to say, as long as I listen, this XSS code will be inspired (the method is to register an account B and add account A "people similar to him ", at the same time, write the code in the Data. when listening to account A, the code will be executed. Of course, csrf will be supported. (later, I heard that the account is no longer in the list, when I asked customer service, the customer service did not quite understand "How did people like him access the service? I replied within 1-2 working days)Solution:

You are all Daniel, you know ~ Please listen to the QQ Security Center and worship you.