Headline
CVE-2022-24131: GitHub - zpxlz/douphp: douphp
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code execution.
XSS vulnerability exists in douphp background adding articles.
Official demo site, administrator login. https://demo.douphp.com/admin/login.php
Source download address. https://down.douphp.com/DouPHP_1.6_Release_20220121.zip
Log in to the background and add articles. 
Insert XSS code at the article name,Submit.
<script>alert(document.cookie)</script>
Cookie pops up in the background. 
The foreground will also trigger vulnerabilities. 