[MEDIUM] TokenController formName not sanitized in hidden input

PKSA-342p-f97q-t585 CVE-2024-37156 GHSA-rrvc-c7xg-7cf3

Affected version: >=2.0.0,<2.5.3

Reported by:
GitHub