Xiaomi: Insecure file upload in xiaoai.mi.com Lead to Stored XSS

Insecure file upload in xiaoai.mi.com Lead to Stored but self XSS...