CVE-2018-16625: Improper Neutralization of Input During Web Page Generation

index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...