An attacker could steal an admin's cookie
The issue is fixed in 5.0.2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
{ "nvd_published_at": "2022-09-02T20:15:00Z", "github_reviewed_at": "2022-08-31T21:27:38Z", "severity": "MODERATE", "github_reviewed": true, "cwe_ids": [ "CWE-79" ] }