medium6.1

CVE-2018-5376

Discuz!

Impact

Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.

Vendor	Product	Affected versions
Discuz	Discuzx	Version 3.4