favorites- Stored XSS defect in web,

[laoquanshi]

favorites-web has a stored-type XSS flaw that allows you to register user nicknames for XSSpayload, such as <script>alert('hello, SB! '); </script>, register a new user with the payload, and then comment,