A Cross-Site Scripting (XSS) vulnerability exists in MapSVG (up to version 9.0.4) produced by PT Norther Lights. The flaw involves improper neutralization of script-related HTML tags, allowing code injection. This vulnerability has a medium severity score of 5.3 and does not require user interaction or privileges to exploit.