Pierre-Yves Guerder

**Name of the Vulnerable Software and Affected Versions** u5CMS versions prior to 12.8.9 **Description** The software is susceptible to reflected Cross-Site Scripting (XSS), a type of attack where malicious scripts are injected into a web page and reflected back to the user. This occurs via the `thanks` parameter within multiple form components when using POST requests. **Recommendations** Update u5CMS to version 12.8.9 or later. As a temporary mitigation, restrict or sanitize the input of the `thanks` parameter in form components.