CVE-2018-18261: Improper Neutralization of Input During Web Page Generation

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...