Threats tagged 'ghsa-fj6v-6443-fgr4'

A stored cross-site scripting (XSS) vulnerability exists in MapSVG versions up to and including 9.0.4. This vulnerability is due to improper neutralization of input during web page generation, which could allow an attacker with limited privileges to inject malicious scripts that execute in the context of other users. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity impact on confidentiality, integrity, and availability.