The vulnerability arises from the incomplete filtering in the sanitize_svg function, which fails to properly sanitize SVG files. This allows attackers to inject malicious JavaScript into SVG files, which can then be executed when an authorized user accesses the URL of the uploaded SVG. The injected script can perform actions such as sending HTTP requests to execute commands on the server, leading to remote code execution.

An attacker uploads a malicious SVG file containing JavaScript to the discussion page. When an authorized user accesses the URL of the uploaded SVG, the malicious script executes, sending a request to the server to run a command. This results in the attacker gaining control over the server or executing arbitrary commands.

Users of the Lollms application who upload or view SVG files, particularly those with administrative or elevated privileges, are affected by this vulnerability.