Val Reshetnyak

**Name of the Vulnerable Software and Affected Versions** Optimizely CMS UI versions prior to 12.16.0 **Description** The issue is a cross-site scripting (XSS) vulnerability that can be exploited via the Admin panel. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control. **Recommendations** For versions prior to 12.16.0, update to version 12.16.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Admin panel to minimize the risk of exploitation.