There is a stored xss vulnerability

[LiBieMe]

An issue was discovered in yunucms 1.1.5 There is a stored XSS attacks vulnerability which allows remote attackers to inject arbitrary web script or HTML.

POC
<script>alert(123)</script>

Vulnerability trigger point

http://localhost/index.php/admin/area/editarea/id/110000
1.Log in as admin

2.Choose this part

3.Click button to edit

4.insert POC and click on the submit button

5.Refresh

6.Come back the homepage