composer›flarum/sticky›CVE-2021-212835.4 MEDIUMCross-site ScriptingThe Flarum Sticky extension has a cross-site scripting vulnerability.