[MEDIUM] Silverstripe Form Capture vulnerable to stored cross-site-scripting

PKSA-m7s5-4q71-z89p CVE-2023-28851 GHSA-38h6-gmr2-j4wx

Affected package: andrewhaine/silverstripe-form-capture

Affected version: >=0.2.0,<=0.2.3|>=1.0.0,<1.0.2|>=2.0.0,<2.2.5

Reported by:
GitHub