Torsten Loebner

The issue allows an authenticated low-privileged user to embed malicious Javascript code, potentially gaining admin rights when an admin user visits the vulnerable website. This is a case of local privilege escalation.

The issue allows an attacker to gain knowledge by reading insufficiently protected sensitive information, which can be used to plan further attacks.

The issue allows an attacker to open a reverse shell with root privileges.