QDSAY cms has multiple stored XSS vulnerabilities

[liao10086]

test:

url: http://localhost/backend/catalog/save/article parameter:name
url:http://localhost/backend/assist/add parameter:title、aliases
url:http://localhost/backend/setup/add parameter:item、alias、content

I hope you can fix this vulnerabilitie
author：xijun.liao@dbappsecurity.com.cn