XSS vulnerabilities in Neos

PKSA-3bzw-sr8z-jcjh

Affected package: typo3/neos

Affected version: >=1.2.0,<1.2.13|>=2.0.0,<2.0.4

Reported by:
FriendsOfPHP/security-advisories