CVE-2021-37710: Cross-Site Scripting via SVG media files – CVSS 5.4 · Watchpost