Stored Cross-Site Scripting Vulnerability in CLTPHP's "Membership Management in the Backend of the Website".

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. A stored cross-site scripting vulnerability exists in the "Membership Management" section of CLTPHP. An attacker can insert malicious js code into the page to obtain user cookies and other...