Cross-site scripting in the comments bundle (see GHSA-628f-v4f6-p37r)

PKSA-3fqv-nq39-s3wg

Affected package: contao/contao

Affected version: >=4.0.0,<5.3.50|>=5.4.0,<5.7.12

Reported by:
FriendsOfPHP/security-advisories