emlog_6.0.0

After setting up the local environment in “/admin/Admin_ log.php?pid=draft” Enter ryjqn"<script>alert(1)<script> to return all the execution results, and a prompt box will pop up，as shown in the figure https://github.com/xuechengen/emlog_6.0.0/blob/main/1.png https://github.com/xuechengen/emlog_6.0.0/blob/main/2.png https://github.com/xuechengen/emlog_6.0.0/blob/main/3.png By looking at the code, it is found that the parameter PID is not filtered https://github.com/xuechengen/emlog_6.0.0/blob/main/4.png