[MEDIUM] CVE-2022-38147 - XSS via uploaded gpx file

PKSA-h12n-xqnh-nnc1 CVE-2022-38147 GHSA-vv3r-fxqp-vr3f

Affected package: silverstripe/assets

Affected version: >=1.0.0,<1.11.1

Reported by:
GitHub, FriendsOfPHP/security-advisories