Quick-Media Code Injection Vulnerability in SVG Plugin PNG Image Encoder

A code injection vulnerability has been identified in the Quick-Media project, specifically within the SVG plugin's PNG image encoding module. This issue arises from improper control over code generation, allowing for potential malicious code injection. The vulnerability affects Quick-Media versions prior to 1.0.

Impact

Exploitation of this vulnerability allows for code injection, where an attacker can introduce and execute malicious code within the application.

Remediation

Users are advised to update to Quick-Media version 1.0 or later, where this vulnerability has been addressed.