CVE:CVE-2012-3870
CNNVD:CNNVD-201210-644
Open Constructor 3.12.0中的objects/createobject.php中存在多个跨站脚本漏洞。远程认证的攻击者可通过（1）name参数或（2）description参数利用该漏洞插入任意网页脚本或HTML代码。
solution:Upgrade openconstructor_project openconstructor to a higher version than 3.12.0,and avoid the version 3.12.0