[MEDIUM] TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework

PKSA-dh2h-m334-x2dj CVE-2022-31048 GHSA-3r95-23jp-mhvg

Affected package: typo3/cms-core

Affected version: >=10.0.0,<10.4.29|>=11.0.0,<11.5.11

Reported by:
GitHub, FriendsOfPHP/security-advisories