DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.
- https://github.com/congcong9184-123/congcong9184-123.github.io/blob/master/douphp_xss.docx
No PoCs found on GitHub currently.