An attacker could steal an admin's cookie
The issue is fixed in 5.0.2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
{
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,
"nvd_published_at": "2022-09-02T20:15:00Z",
"github_reviewed_at": "2022-08-31T21:27:38Z"
}