Amin İsayev

An improper Access Control List (ACL) check occurs in the outputs for tagged items. This flaw allows unauthorized users to view content items that belong to categories they are not permitted to access.

Improper Access Control List (ACL) checks in category webservice endpoints allow unauthorized users to create categories. ACL is a mechanism used to manage permissions and restrict access to specific resources within a system.

Improper escaping flags in schema.org markup outputs create a Cross-Site Scripting (XSS) vector. XSS is a security flaw that allows an attacker to inject malicious scripts into web pages viewed by other users.