[MEDIUM] XSS injection in backoffice

PKSA-xjhj-xnck-kxsf GHSA-vq4j-qcx7-ppc6

Affected package: thelia/thelia

Affected version: >=2.1.0,<2.1.2

Reported by:
GitHub, FriendsOfPHP/security-advisories