An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter.Referenceshttps://github.com/caokang/waimai/issues/8