CVE-2018-15570: Improper Neutralization of Input During Web Page Generation

In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter...