Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.