A cross-site scripting (XSS) vulnerability exists in Ruijie network switches RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP, and RG-ES210GS-P running ESW_1.0(1)B1P48. The flaw is in the Cloud Management component's set_cloud_serverUrl.cgi file, where manipulation of the 'url' argument allows remote XSS attacks. The vendor has not responded to the disclosure, and public exploit code is available. The CVSS score is low (2.4) indicating limited impact.