WS-2018-0015

On Firefox there is a XSS vulnerability in case a malicious attacker can write into the xml:base attribute on an SVG anchor...

Cross-site Scripting (XSS)

angular is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization on xml:base attributes, which allows the Firefox browser to render malicious scripts...