rejucms 2.1 has XSS via the ucenter/cms_user_add.php u_name parameter.
CVE Status: Modified
No CVSS data available
Exploit-db Github