CVE-2020-11887

svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document

published April 17, 2020

CVSS
—
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00700 · 52.6th percentile
Published
2020-04-17T20:08Z
EPSS history
Timeline
  • 17 APR 20:08Z
    svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document
    cvelistv5