Vulnerability in File Upload Validation Allows Stored Cross-Site Scripting (XSS)

A vulnerability in the validation of uploaded files allows the execution of stored cross-site scripts (XSS) through malicious SVG files. These SVG files execute JavaScript for each visitor.