Issue #1892530 by amateescu, larowlan, grisendo, pwolanin: XSS in image file description (forward port of SA-CORE-2013-003).