CVE:CVE-2009-3191
CNNVD:CNNVD-200909-293
PAD Site Scripts 3.6版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助对(1)rss.php和(2)opml.php的cat参数，注入任意网络web脚本或HTML。
solution:Upgrade pad-site-scripts pad_site_scripts to a higher version than 3.6,and avoid the version 3.6