When an HTML document displays an SVG image through an <embed> or <iframe> tag, the image is displayed and the JavaScript inside it executes. In the DocuSign-themed campaign that Avanan researcher ...