[MEDIUM] Sylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address Book

PKSA-nsc4-mbdg-1r18 CVE-2024-29376 GHSA-7prj-9ccr-hr3q

Affected package: sylius/sylius

Affected version: >=1.11.0-alpha.1,<1.11.17|>=1.10.0-alpha.1,<1.10.16|<1.9.12|>=1.13.0-alpha.1,<1.13.1|>=1.12.0-alpha.1,<1.12.16

Reported by:
GitHub