An issue exists in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter.
bijiadao waimai super cms 20150505