[MEDIUM] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form

PKSA-yhyy-7dgg-qhcw CVE-2021-21358 GHSA-x79j-wgqv-g8h2

Affected package: typo3/cms-form

Affected version: >=11.0.0,<=11.1.0|>=10.2.0,<=10.4.13

Reported by:
GitHub