Description Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter. References http://www.whsgwl.net/text.php?textid=35