TpMeCMS security vulnerabilities

TpMeCMS is a CMS based on FastAdmin framework developed by Xiaohe personal developer. A security vulnerability exists in TpMeCMS version 1.3.3.2, which originates from a cross-site scripting vulnerability in the Title, Images and Content parameters of the /h.php/page?ref=addtabs file...