[MEDIUM] Moderately critical - Cross Site Scripting

PKSA-7fkr-1psn-gtby CVE-2018-9861 GHSA-g78h-pf65-46rv

Affected package: drupal/drupal

Affected version: >=8.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4,<8.4.7|>=8.5,<8.5.2

Reported by:
FriendsOfPHP/security-advisories, GitHub