lyadmin cross-site scripting vulnerability

lyadmin is a set of lightweight general background, using ThinkPHP + Bootstrap3 production, built-in system settings, upload management, rights management, module management, plug-in management and other functions. lyadmin 1.x is vulnerable to cross-site scripting. Attackers can use the...