zzcms8. 1 a stored xss+csrf can steal all the user cookies

No description provided by source...