Privilege escalation via stored description-field script

Stored XSS in GIS3W G3WSuite 3.5 allows remote authenticated users to gain administrative privileges through a crafted description. The cartographic-group Description widget saves unsanitized HTML from an editor's intercepted update request and executes the embedded JavaScript whenever a user opens the administration interface. An Editor Level 1 account and a later administrator login are required; the script can act through the administrator's session to promote the attacker's account, alter users or content, or reset the administrator password.