[MEDIUM] Insert tag injection in the login module

PKSA-jvc9-sf8h-c99f CVE-2019-19714 GHSA-jc43-qrrp-98f5

Affected package: contao/contao

Affected version: >=4.8.4,<4.8.6

Reported by:
FriendsOfPHP/security-advisories, GitHub