CVE-2024-27609: Bonita cross-site scripting vulnerability

The vulnerability arises from the absence of input sanitization in specific API endpoints handling user input in the administration panel. The provided data primarily shows the fix (adding the SanitizerFilter and enabling it via configuration) but does not explicitly identify the exact pre-patch functions responsible for processing user input without sanitization. The core issue is the lack of sanitization in vulnerable versions, but the specific functions in the affected packages (bonita-web-server and platform-resources) that directly handle the unsanitized input are not named in the provided code diffs or descriptions. Thus, no functions can be confidently identified with high certainty based on the available information.