Jakob Hagl

BioStar 2 version 2.9.11.6 allows users to set a new password without providing the current password. Exploiting this flaw, in combination with other vulnerabilities, can lead to unauthorized account access and potential system compromise.

An issue in the session management component of the administrative web interface allows a remote attacker to escalate privileges.

The issue arises from improper encoding of arbitrarily submitted settings parameters in the Settings Menu, specifically in the inc/class-easyfancybox.php file. This leads to Stored XSS due to the lack of an inline styles output filter.