An XSS vulnerability exists in PHPRelativePath (aka Relative Path) through 1.0.2 via the RelativePath.Example1.php path parameter.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-12507.json"