Chinaunix persistent XSS and repair

Brief description:
Some input locations are not strictly filtered, resulting in persistent XSS. You can obtain cookies to simulate logon and other usage methods.
Detailed description:
When job.chinaunix.net is used to modify personal information, the code can be executed and stored in harmony.

Log on to the console and modify your personal information. In the "mailing address" and "Personal Homepage" boxes, enter the following content:
"> <Script> alert (/vulnhunt for XSS/) </script>
Save.
Triggered when someone browses personal information at www.2cto.com.

Proof of vulnerability:

<Td>

<Input id = "address" type = "text" value = "" size = "30" maxlength = "100" name = "address">

<Script>

Alert (/vulnhunt for XSS /)

</Script>

"/& Gt; & nbsp; zip code & nbsp;

<Input id = "postalcode" type = "text" value = "" size = "6" maxlength = "10" name = "postalcode">

</Td>
Solution:
Filter