CVE-2020-11887

by Fred · 17/04/2020

svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.

Date published : 2020-04-17