Bug: ESPCMS P8 XSS

[GodEpic]

Hi, I would like to report Cross Site Scripting vulnerability in ESPCMS P8.
POC:
1.Login to administrator panel.
2.Open below URL in browser which supports flash.
url:http://www.espcms.com/install_pack/espcms_admin/index.php
eg:
payload:<script>alert('xss')</script>
change title parameter



Fix:
Filter the title parameter