Yao-Ruo

**Name of the Vulnerable Software and Affected Versions** ZLMediaKiet versions 4.0 through 5.0 **Description** The issue allows an attacker to execute arbitrary code via a crafted script to the URL, potentially leading to the execution of malicious scripts. This is a Cross Site Scripting vulnerability. **Recommendations** For versions 4.0 and 5.0, consider restricting access to the URL that allows the execution of scripts until a patch is available. As a temporary workaround, avoid using crafted scripts to the URL in ZLMediaKiet until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.