CVE-2018-16625: Improper Neutralization of Input During Web Page Generation

index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...

PT-2019-9360

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue allows for XSS via an SVG file with JavaScript in a SCRIPT element, specifically in the index.php/Admin/Uploaded component. Recommendations For version 5.1, consider restricting access to the...