[MEDIUM] JavaScript cross-site scripting prevention is incomplete.

PKSA-vhn6-38y5-kddj CVE-2017-6927 GHSA-585j-5449-mf5m

Affected package: drupal/drupal

Affected version: >=8.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.4.5

Reported by:
FriendsOfPHP/security-advisories, GitHub