Valine: Stored XSS via Crafted comment Parameter in Comment Submission

[tangjie1]

For the stored XSS issue, intercept the request when submitting a comment and modify the comment parameter to <img src="1'onerror='console.log(1)'a='">, resulting in the vulnerability being triggered.