Gyunerzeki

**Name of the Vulnerable Software and Affected Versions** ZfcUser versions prior to 1.2.2 **Description** The issue allows remote attackers to inject arbitrary web script or HTML via the `redirect` parameter in the `user/login.phtml` file. This enables cross-site scripting (XSS) attacks. **Recommendations** For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the `user/login.phtml` file or disabling the use of the `redirect` parameter until a patch is available.