CVE-2019-9554: Improper Neutralization of Input During Web Page Generation

In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI...