[MEDIUM] makeCollapsible allows applying event handler to any CSS selector

PKSA-pvds-fsx9-62mq CVE-2020-10960 GHSA-pfm2-mqwj-ggm5

Affected package: mediawiki/core

Affected version: >=1.31.0,<1.31.7|>=1.33.0,<1.33.3|>=1.34.0,<1.34.1

Reported by:
GitHub, FriendsOfPHP/security-advisories