An improper input sanitization vulnerability in the menu node name rendering allows Author-level users to inject stored JavaScript that executes in an Admin's browser when they open the configure dialog for a page referencing the malicious node. The payload executes with the Admin's session privileges, allowing an attacker to perform administrative actions and create an attacker-controlled administrator account, resulting in full account takeover and privilege escalation.