Kouhei Morita

The issue is caused by improper handling of EXIF meta data, leading to a cross-site scripting vulnerability. When an image is rendered and crafted EXIF meta data is processed, an arbitrary script may be executed on the web browser.