Studio 42 · Elfinder · CVE-2021-45919
**Name of the Vulnerable Software and Affected Versions**
Studio 42 elFinder versions 2.1.31 and earlier
**Description**
The issue allows for XSS via an SVG document. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.
**Recommendations**
For versions 2.1.31 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.