Cross Site Scripting(XSS) Vulnerability in Latest Release 4.3.7 New category registration

[Aquilao]

baserCMS 4.3.7 and earlier is affected by Cross Site Scripting (XSS).

Impact: XSS via Arbitrary script execution.
Attack vector is: Administrator must be logged in.
Tested baserCMS Version : 4.3.7(Latest)

payload:
"><svg/onload=alert(1)><--xsstest

[ryuring]

@Aquilao Hi. Thank you for reporting.

I am sending you an email. Did you see it?

I will close this issue.
I'm writing the reason in the email.