AIKIDO-2026-10222

TL;DR

Affected versions of this module are vulnerable to cross-site scripting (xss) due to insufficient sanitization of certain image-related values during in-place content editing. Malicious input can be stored and later rendered in the browser, resulting in persistent script execution. Exploitation requires that the attacker has permission to create or edit the affected field, which limits the scope of the vulnerability.