Jarosław Przebinda

**Name of the Vulnerable Software and Affected Versions** DRIMO CMS (affected versions not specified) **Description** Reflected Cross-Site Scripting (XSS) occurs in the searching functionality. An attacker can craft a URL containing a malicious payload in the `q` parameter that, when accessed by a victim, executes arbitrary JavaScript in their browser. **Recommendations** Delete the `info.php` file to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.