DoraCMS Cross-Site Scripting Vulnerability

DoraCMS is based on Nodejs + express + mongodb written a content management system . A cross-site scripting vulnerability exists in the id parameter of the getNodes.php page of DoraCMS, which can be exploited by an attacker to steal cookie-based authentication or inject malicious scripts...