Miguel Gomez

A stored cross-site scripting issue exists in the Survey Menu Entries administration page. An authenticated user with `global settings:read` permission can create a survey menu entry containing malicious data. This data is stored in the `surveymenu entries.data` field and subsequently inserted into a single-quoted HTML title attribute without proper encoding.

A stored Cross-Site Scripting (XSS) issue exists in the oEmbed confirmation rendering workflow. XSS is a flaw that allows an attacker to inject malicious scripts into content that is then served to other users.

A reflected cross-site scripting issue exists in the Space membership-request workflow. An attacker can inject malicious button configuration into the `options` query-string parameter of the 'space/membership/request-membership-form' endpoint. By tricking an authenticated non-member into submitting the membership request form, the server returns JavaScript containing the attacker-controlled code.

A stored cross-site scripting issue exists in the comment-deletion notification flow. A Space administrator can exploit this by deleting another user's comment and inserting HTML or JavaScript into the deletion reason when choosing to notify the original author.

An authenticated reflected cross-site scripting issue exists in the HTML editor popup endpoint. The `text` and `name` query parameters are processed using a blacklist sanitizer and subsequently rendered without context-appropriate output encoding. Cross-site scripting is a technique where malicious scripts are injected into trusted websites.

An authenticated SQL injection exists in the Central Participant Database (CPDB) workflow. This issue occurs during the process of copying survey participant tokens to the central participant list. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database.