There is a Stored XSS vulnerable in Categories of Admin Panel.

[a05110511t]

Describe your problem

I found a Stored XSS in Admin Panel's categories page, http://192.168.255.128:8000/admin/categories
If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user.

Steps to reproduce the problem

1. Install and login to the website.

2. Go to Admin Panel and Click Categories button.
   

3. Click any category(ex. General) or Add a new category you want.
   And paste the payload <svg/onload=alert('xss_test')> to Friendly URL then save it.
   

4. There is a Stored XSS triggered.
   
   

Bludit version

3.13.1

PHP version

PHP version: 7.2.24