Cross-site scripting in the Colorbox caption (see GHSA-rr85-7j77-pppg)

PKSA-vz5f-wd4z-2kf4

Affected package: contao-components/colorbox

Affected version: >=1.0.0,<1.6.4.3

Reported by:
FriendsOfPHP/security-advisories