An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen.Referenceshttps://github.com/AvaterXXX/XiaoCms/blob/master/XSS.md#xss1