[MEDIUM] Craft CMS: Stored XSS in the control panel via unescaped draft name

PKSA-x767-zzvx-956t GHSA-2rp4-x2j7-qmcc

Affected package: craftcms/cms

Affected version: >=5.0.0-RC1,<5.10.8

Reported by:
GitHub