Website background XSS_Site introduction

[crow821]

After installing xino-pro4 After 1.2, there is a storage XSS on the left side of the bottom of the background setting

Then in http://127.0.0.1/xiuno/admin/ Continue to log in to the administrator background and http://127.0.0.1/xiuno/admin/?setting -base. Htm setting page custom setting information: in http://127.0.0.1/xiuno/admin/?setting -base. Htm site introduction module, modified to XSS Code:

Modify code as： visit http://127.0.0.1/xiuno/

XSS vulnerability exists at this time