Privilege escalation in the IPC component. This vulnerability affects Firefox < 149.
Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges