Nguyen Van

The issue is related to an Authenticated Reflected Cross-Site Scripting (XSS) vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions. The vulnerability requires authentication with admin or higher privileges, indicating it needs access to sensitive areas of the website.

The issue is related to an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker can inject malicious scripts into the website without needing authentication, and these scripts will be stored and executed when other users access the site.

The issue allows authenticated low-role users to create, edit, and delete maps.