Username in the file /view/user.php have an XSS vulnerability

[Extraordinary-FEI]

I tested the XSS vulnerability in the /view/user.php directory of the project and found that a popup XSS can be triggered in the nickname field.

Project URL
https://github.com/FantasticLBP/Hotels_Server

[Extraordinary-FEI]

nickname地方存在xss注入点

[Extraordinary-FEI]

There is an XSS injection point in the nickname field.