Get Demo
Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the Province field in Address Book.