In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter.Referenceshttps://github.com/yzmcms/yzmcms/issues/3