Launchpad.net

CVE 2020-25789

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document.

See the CVE page on Mitre.org for more details.