[MEDIUM] By-passing Cross-Site Scripting Protection in HTML Sanitizer

PKSA-7fkk-q973-4xmn CVE-2023-38500 GHSA-59jf-3q9v-rh6g

Affected package: typo3/html-sanitizer

Affected version: >=2.0.0,<2.1.2|>=1.0.0,<1.5.1

Reported by:
GitHub