[MEDIUM] TYPO3 CMS has Cross-Site Scripting in Indexed Search

PKSA-38f7-f61m-dktr CVE-2026-47348 GHSA-cg75-qfg2-w9hj

Affected package: typo3/cms-indexed-search

Affected version: >=14.0.0,<14.3.3|>=13.0.0,<13.4.31

Reported by:
GitHub