The release notes state: "Thanks to Marc Montas from Sucuri for reporting an issue that could lead to XSS from global variables."
XSS
Marc Montas from Sucuri
No
2020-10-29 (about 2 years ago)
2020-11-01 (about 2 years ago)