An issue exists where a module specific to the distribution does not sufficiently sanitize media names, allowing for Stored Cross-site Scripting (XSS), which occurs when an application includes untrusted data in a web page without proper validation or encoding. Exploitation requires the attacker to possess a role with permissions to create or edit a media entity.