File format attacks are another way to put XSS payloads into PDF or SVG files. These exploits can take advantage.