CVE:CVE-2021-4251
CNNVD:CNNVD-202212-3506
andrewsauder as是一个CMS。
andrewsauder as存在安全漏洞，该漏洞源于其include.cdn.php文件的getFullURL函数允许攻击者实现跨站脚本。
solution:Upgrade as_project as to a higher version than 2021-11-03,and avoid the version (,2021-11-03)