[MEDIUM] Magento Reflected Cross-site Scripting vulnerability via 'file' parameter

PKSA-m8rz-jc2c-7m91 CVE-2021-21029 GHSA-jwxh-wj79-ccm6

Affected package: magento/community-edition

Affected version: >=2.4.0,<2.4.2|<2.3.6-p1

Reported by:
GitHub