Ggboom-993

**Name of the Vulnerable Software and Affected Versions** Dcat-Admin version 2.1.3-beta **Description** A stored cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `URL parameter`. This enables attackers to potentially manipulate website content or steal user data. **Recommendations** For Dcat-Admin version 2.1.3-beta, consider disabling the URL parameter injection functionality until a patch is available. Restrict access to the vulnerable URL parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.