nickname xss filtering was not performed for the nickname in the browser Posting user name. The nickname was not filtered.
Because the user name that contains xss payload is used for Posting, xss affects browsing
Register the nickname for xss payload: <script>alert('Hello, hacking! '); </script>

The foreground post function module modifies the existence of storage XSS at the post
Therefore, when Posting with a title that contains xss payload, only browsing is affected by xss
Register a new test user