MinDoc has a stored XSS vulnerability due to not filtering the onfocus attribute.

[sky-teacher]

1.Edit the article create an input box with the 'onfocus' attribute

2. save and Publish

3.Anyone who visits this article and clicks on this input box will trigger XSS.
(I used another browser without logging in to test)