ForestBlog Existing Xss

[QDming]

Vulnerability Product:ForestBlog Vulnerability version: all Vulnerability type: Stored XSS Vulnerability Details:

the Stored XSS payload could let admin causes disclosure of cookies、root path of websites、variables of PHP and stuff

1. Login link: http://forestblog.liuyanzhao.com/login I registered my own account here Account: linkk Password: linkk

2. When writing the article title or content, enter Click to publish

3. Click on the homepage to view this article

Discovered that xss was triggered