When common user send this malicious URL to the web manager and request it, the web manager could be executed the malicious javascript code

[Mcculloughj]

When common user send this malicious URL to the web manager and request it, the web manager could be executed the malicious javascript code

XSRF.Vulnerability.exists.in.the.file.of.DedeCMS.V5.7sp2.pdf

Originally posted by @TaroballzChen in ky-j/dedecms#12