[MEDIUM] TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework

PKSA-d4vj-m6hn-xm1j CVE-2026-15305 GHSA-mfqj-cqv3-h7xw

Affected version: >=14.2.0,<14.3.5

Reported by:
GitHub, FriendsOfPHP/security-advisories