2 matches found
CVE-2020-11887
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document...
6AI score0.007EPSS
SaveExploits1References1
CVE-2020-11887
svg2png 4.1.1 contains a vulnerability that allows cross-site scripting (XSS) with resultant SSRF via JavaScript inside an SVG document. The issue is documented across multiple sources (NVD, Red Hat, Veracode, OSV, GHSA, CNVD, etc.). Affected component is the SVG rendering/processing in svg2png; ...
6.1CVSS5.9AI score0.007EPSS
SaveExploits1References1Affected Software1
20