Description

Here FolderName field is vulnerable to HTML injection, a malicious user could potentially rename a folder with a payload containing malicious code. This could result in an attack on the admin who edits the folder, as the payload could execute upon the admin’s interaction with the folder. This attack could potentially allow the attacker to gain unauthorized access to the admin’s system or steal sensitive information, or it can force admin to get redirected on attacker website.

Proof of Concept

https://drive.google.com/file/d/1RZjHRZiTPcdIU4qR1cmwL3Tv2f9qVar9/view?usp=sharing