CVE-2024-29273: Improper Neutralization of Input During Web Page Generation

There is Stored Cross-Site Scripting XSS in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document...