Name of the Vulnerable Software and Affected Versions xml2rfc versions prior to 3.12.4

Description The issue allows script elements in SVG sources, which can lead to XSS attacks in HTML output. This impacts websites that publish HTML drafts and RFCs.

Recommendations For versions prior to 3.12.4, update to version 3.12.4 to resolve the issue. As a temporary workaround, consider scraping script elements from SVG files if the SVG source is self-contained within the XML.