= 10.0.36
Composr 10.0.36 allows XSS in an XML script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.