One Kebba cms V2.0 has xss vulnerability

OneCapaCms is a small business building system based on thinkphp 5.0. One Keba cms V2.0 has an xss vulnerability that can be exploited by attackers to obtain administrator cookies...