Thanks to Nils Emmerich of ERNW Research GmbH for discovering and reporting this issue

Insufficient URL encoding flaw in allowed script location check

LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which

Insufficient URL decoding flaw in categorizing macro location