The Sign widget module for Drupal allows users to create and save signatures as SVG images. A vulnerability exists due to insufficient sanitization of user-supplied content before saving it to the public file system. This flaw can lead to a cross-site scripting (XSS) vulnerability if a maliciously crafted file is uploaded. The issue is fixed in version 1.15.0 of the module.