Multiple stored XSS vulnerabilities in rpcms 3.5.5

[SecBridge]

1、"设置"->"基本设置"->"统计代码":


2、"导航"：


3、“文章”->"超链接“：

Change the burpsutie packet capture, remove http://, and encode the HTML entity in front of alert():
payload: javascript%26%23x3a%3Balert(document.cookie)

[ralap-z]

Thank you very much for providing feedback on the vulnerability. It has been fixed in the form of a plugin(https://app.rpcms.cn/app/157.html)
Thank you again