IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain a cross-site scripting (XSS) vulnerability. This flaw allows a privileged user to inject arbitrary JavaScript code into the web user interface, which can alter the intended functionality and potentially lead to credential disclosure within a trusted session. The vulnerability has a medium severity rating with a CVSS score of 4.8.