The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
Published June 24, 2020.
Gleamtech Fileultimate