ForestBlog Existing Xss

[QDming]

Vulnerability Product:ForestBlog
Vulnerability version: all
Vulnerability type: Stored XSS
Vulnerability Details:

<script>alert(document.cookie)</script>

the Stored XSS payload could let admin causes disclosure of cookies、root path of websites、variables of PHP and stuff

1. Login link: http://forestblog.liuyanzhao.com/login
   I registered my own account here
   Account: linkk
   Password: linkk
   

2. When writing the article title or content, enter<script>alert (document. cookie)</script>
   Click to publish
   

3. Click on the homepage to view this article
   

Discovered that xss was triggered