XSS through image upload of contacts using svg file with png extension

How it was found

Hello again, this is a bypass #89487 basically use the same payload file but change the extension to PNG

Impact

XSS or Open redirect when viewing the image of a contact