MediumCVSS 6.1
EPSS 2.1%
Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.