[MEDIUM] Firefly III vulnerable to image-based stored XSS

PKSA-vqyz-424j-mqg6 CVE-2019-13647 GHSA-pcxq-28f6-m3fm

Affected package: grumpydictator/firefly-iii

Affected version: <4.7.17.3

Reported by:
GitHub