CVE-2024-21724

Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.

CVE-2024-21723

Inadequate parsing of URLs could result into an open redirect.

CVE-2024-21726

Inadequate content filtering leads to XSS vulnerabilities in various components.

CVE-2024-21722

The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.

CVE-2024-21725

Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components.