Qibosoft Cross-Site Scripting Vulnerability

Qibosoft qibosoft is a content management system (CMS) from Qibosoft, China. qibosoft has a cross-site scripting vulnerability that originates in the /admin/index.php?lfj=friendlink & action=add link of the admin component of the product. The vulnerability is caused by the /admin/index.php?lfj=friendlink & action=add link in the admin component of the product, which does not validate the input data and can be exploited to execute client-side code.