[MEDIUM] Cross-Site Scripting in Fluid Engine

PKSA-1rbp-fbhh-b1cd CVE-2020-15241 GHSA-7733-hjv6-4h47

Affected package: typo3/cms-core

Affected version: >=8.0.0,<8.7.25|>=9.0.0,<9.5.6

Reported by:
GitHub, FriendsOfPHP/security-advisories