| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/views_svg_animation | < 1.0.1 | 1.0.1 |
| views svg animation | < 1.0.1 | 1.0.1 |
This module enables you to animate an SVG graphic by selecting certain rows in a view.
The module doesn't sufficiently sanitize the SVG file before embedding it into the html.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission to upload SVG files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free