CVE-2024-34452: Improper Neutralization of Input During Web Page Generation

CMSimpleXH 1.7.6 allows XSS by uploading a crafted SVG document...

XWiki Cross-Site Scripting Vulnerability (CNVD-2022-72198)

Xwiki is a Wiki platform for creating Web collaboration applications from the French company Xwiki. XWiki version 12.10.2 contains a cross-site scripting vulnerability that could be exploited to launch a cross-site scripting attack against a target via the SVG document upload comment feature...

CVE-2020-12882: Improper Neutralization of Input During Web Page Generation

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...