Metinfo 6.x存储型XSS分析（CVE-2018-20486）

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