CVE-2018-19048

CVE-2018-19048

Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

Source: CVE-2018-19048