Chbi

The issue allows for cross-site scripting (XSS), which is a type of attack where an attacker injects malicious code into a website, allowing them to steal user data or take control of the user's session.

The issue allows a user to submit potentially dangerous payloads, such as XSS code, to be saved as their first name, last name, or display name in the profile fields. This can cause issues including escalation of privileges or unknown execution of malicious code when replying to messages in Mahara.

The issue allows a user to submit a potentially dangerous payload, such as XSS code, to be saved as titles in internal artefacts.

A stored XSS issue in the Media Objects component allows an authenticated user to inject JavaScript, potentially gaining administrator privileges. This is related to the `setParameter` function in `Services/MediaObjects/classes/class.ilMediaItem.php`.

The issue allows an authenticated user to inject JavaScript and gain administrator privileges. This is achieved by exploiting the real name or email address field in the themes/CleanFS/templates/common.editallusers.tpl template.

The issue allows an authenticated user to inject JavaScript, potentially gaining administrator privileges and executing JavaScript against other users, including unauthenticated ones. This is achieved via the `name`, `title`, or `id` parameter to the "plugins/dokuwiki/lib/plugins/changelinks/syntax.php" endpoint.

The issue allows an authenticated user to edit swimlanes of a private project belonging to another user by altering form data.

The issue allows an authenticated user to edit columns of a private project belonging to another user by altering form data.

The issue allows an authenticated user to remove categories from a private project of another user by altering form data.

The issue allows an authenticated user to see the names of tags of a private project of another user by altering form data.

The issue allows an authenticated user to remove attachments from a private project of another user by altering form data.

The issue allows an authenticated user to inject JavaScript via the `Filename` of the Filemanager, which is then mishandled during rendering by the application administrator and other users. This occurs due to a Stored XSS vulnerability involving the IMG element.

The issue allows an authenticated user to inject JavaScript via a Stored XSS vulnerability, specifically through the IMG element at the "Leadname" of CRM. This injected JavaScript is mishandled during rendering and can affect the application administrator and other users.

A Cross-Site Request Forgery (CSRF) issue exists via the IMG element, allowing an authenticated user to gain administrator privileges if an administrator opens a wiki page containing a malicious IMG element, related to the tiki-assignuser.php file.

A Cross-Site Request Forgery (CSRF) issue exists via the IMG element, allowing an authenticated user to modify global permissions if an administrator opens a malicious wiki page. This could lead to assigning administrator privileges to unauthenticated users, related to the `tiki-objectpermissions.php` file.

The issue allows an unauthenticated remote attacker to inject JavaScript via the `User-Agent` HTTP header, which is mishandled during rendering by the application administrator. This occurs because the application fails to properly handle the `User-Agent` header, allowing malicious input to be executed.

The issue allows an authenticated user to inject JavaScript via an IMG element at the "History" of Profile, Calendar, Tasks, and CRM. This JavaScript is mishandled during rendering by the application administrator and other users.