QCMS cross-site scripting vulnerability (CNVD-2019-10284)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/category.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...