一个后台存储型xss漏洞

[yazi7]

When adding movie names, malicious code can be stored because there is no filtering of parameters
Affected version:<=1.2
test：

The trigger：

The main reason is that the code does not filter parameter values：