An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter.
- https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss3
No PoCs found on GitHub currently.