Andrew Lyons

An issue exists where the software fails to properly sanitize and escape the `id` parameter before incorporating it into a SQL statement. This leads to a SQL Injection, which can be exploited by users possessing a specific capability. While this capability is restricted to administrators by default, it can be delegated to roles with lower privileges.

The issue is related to a cache poisoning risk, which may allow an attacker to gain access to confidential information through caching. Additional validation for local storage was required to address this risk.

The issue is related to an elevation of privilege vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted string. This vulnerability enables cross-site scripting (XSS) attacks, which can be exploited by an attacker to run a script in the security context of the current user.

The issue allows remote attackers to inject arbitrary web script or HTML via a crafted string. This is due to an elevation of privilege vulnerability in the way that HTML strings are sanitized. An attacker who successfully exploited this vulnerability could perform cross-site scripting attacks and run script in the security context of the logged-on user.