Project: 
Views SVG Animation
Date: 
2024-October-23
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: 
Cross Site Scripting
Affected versions: 
<1.0.1
CVE IDs: 
CVE-2024-13287
Description: 

This module enables you to animate an SVG graphic by selecting certain rows in a view.

The module doesn't sufficiently sanitize the SVG file before embedding it into the html.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission to upload SVG files.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: