[HIGH] Magento stored cross-site scripting (XSS) in the customer address upload feature

PKSA-sv5d-15yf-jkvt CVE-2021-21030 GHSA-6988-g89m-27vf

Affected package: magento/project-community-edition

Affected version: <=2.0.2

Reported by:
GitHub