CVE-2023-33196

Fixed upstream EPSS <1%CVSS 5.5

Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. This issue has been fixed in version 4.4.7.