WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache

WordPress' Object Cache that caches data from the database did not validate or encode the cache key. If an attacker managed to inject a malicious cache key that was then output in a third party plugin, it could lead to XSS.