Gil Correia

An issue in Flipsnack allows a local attacker to obtain sensitive information via the `reader.gz.js` file.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vulnerability affects Crafter Studio on various operating systems and architectures.

The issue is related to Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js, specifically on the line `label: elementInfo.label`. This suggests a potential problem with how user input is handled, allowing for malicious scripts to be injected into the website.

The issue is related to Cross Site Scripting (XSS) and can be exploited via entry revisions and drafts.

The issue is related to Stored Cross Site Scripting (XSS) in the "/admin/myaccount" API endpoint. This allows for malicious scripts to be stored and executed on the platform.

The issue is related to a stored cross-site scripting (XSS) vulnerability. This occurs via the /admin/settings/fields page, allowing potential attackers to inject malicious scripts. Cross-site scripting (XSS) is a type of security vulnerability that can be used by attackers to steal user sessions, deface websites, or redirect users to malicious sites.

The issue is related to Cross Site Scripting (XSS) via the file `src/helpers/Cp.php`. This allows for potential malicious script execution.