CVE-2020-20697: There is a critical vulnerability in NodCMS · Issue #41 · khodakhah/nodcms

I found a serious vulnerability in NodCMS.
if anyone could login in backend ,he can insert XSS code to execute，it would cause Information disclosure,Account stolen ,etc.
when login in backend,click settings ,then modify content in Address textarea into JavaScript code :

and submit it.
like this

Then ,this string would be stored in database.
When someone browse this website in frontend，this string of code will be execute .
example like this:

This is a Stored XSS vulnerability, be kindly notified please.