[MEDIUM] Bolt Cross-site Scripting via the slug, teaser or title parameters

PKSA-9tcn-454k-r6y9 CVE-2019-9553 GHSA-2g23-qmmp-fvmr

Affected package: bolt/bolt

Affected version: =3.6.4

Reported by:
GitHub