SVG Image module allows to upload SVG files. The module did not sufficiently protect against malicious code inside SVG files leading to a C…

SVG Image module allows to upload SVG files.

The module did not sufficiently protect against malicious code inside SVG files leading to a Cross Site Scripting vulnerability.

This vulnerability is mitigated by the fact that an attacker must have permission to upload an SVG file.