DedeCMS stored xss vulnerability

Dedecms PHP open source website management system has a stored XSS vulnerability in the `des` parameter in shops_delivery.php, allowing the attacker to obtain user cookies when the shop module is open. The vulnerability trigger point in the shops_delivery.php file is the lack of strict filter for the `des` parameter. The output file code also lacks filtering, leading to vulnerability trigger. Exploiting the vulnerability can occur in the admin backend system and the front end