CVE-2021-45018: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Catfish =6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.htmland then the .html file on the website that uses this editor the file suffix is allowed...