Cross-Site Scripting (XSS)

zendeskappssupport is vulnerable to cross-site scripting XSS attacks. The attacks exist because it does not sanitize SVG files during application submission, allowing a malicious user to inject and execute arbitrary webscript through the markup in a SVG file...