[MEDIUM] TYPO3-CORE-SA-2021-004: Cross-Site Scripting in Form Framework

PKSA-h6n8-zzc6-1djm CVE-2021-21358 GHSA-x79j-wgqv-g8h2

Affected package: typo3/cms-core

Affected version: >=10.0.0,<10.4.14|>=11.0.0,<11.1.1

Reported by:
GitHub, FriendsOfPHP/security-advisories