An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page.