[MEDIUM] TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework

PKSA-tycc-kzzh-s3ry CVE-2022-31048 GHSA-3r95-23jp-mhvg

Affected package: typo3/cms

Affected version: >=10.0.0,<10.4.29|>=11.0.0,<11.5.11

Reported by:
GitHub, FriendsOfPHP/security-advisories