AEM WCM Core Components CVG Image vulnerable to Reflected Cross-site Scripting

Core Components version 2.20.6 and earlier suffer from a reflected cross-site scripting XSS vulnerability in AdaptiveImageServlet via SVG images. An attacker with author access can upload a special crafted SVG image including a malicious Javascript and obtain a link that, when loaded by another...