Search by 
contao-components/colorbox Security Advisories for 1.6.3 (1)
-
Cross-site scripting in the Colorbox caption (see GHSA-rr85-7j77-pppg)
Affected version: >=1.0.0,<1.6.4.3
Reported by:
FriendsOfPHP/security-advisories