[MEDIUM] Magento Open Source allows XML Injection

PKSA-3ctk-j6rb-p8sd CVE-2023-29289 GHSA-wh42-8r2w-873x

Affected package: magento/project-community-edition

Affected version: <=2.0.2

Reported by:
GitHub