QCMS cross-site scripting vulnerability (CNVD-2019-10276)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/system.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...