Altium Forum Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Altium Forum, stemming from inadequate server-side input sanitization in forum post content. This vulnerability allows authenticated attackers to inject arbitrary JavaScript into posts, which is then executed when other users view the affected content. The execution occurs within the context of the victim's authenticated Altium 365 session, potentially granting unauthorized access to workspace data, including design files and workspace settings. Exploitation of this vulnerability requires user interaction to view the malicious post.

Impact

Exploitation of this vulnerability allows injected JavaScript to execute in the context of the victim's Altium 365 session, leading to unauthorized access to workspace data, such as design files and workspace settings.