Zur1Ch

**Name of the Vulnerable Software and Affected Versions** UJCMS version 4.1.3 **Description** A cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the URL parameter under the Add New Articles function. **Recommendations** For UJCMS version 4.1.3, consider disabling the Add New Articles function until a patch is available to prevent exploitation of the XSS vulnerability. Restrict access to the URL parameter to minimize the risk of arbitrary script execution.