[MEDIUM] TYPO3-EXT-SA-2023-003: Cross-Site Scripting in extension "Fluid Components" (fluid_components)

PKSA-9jkm-n2br-4n5j CVE-2023-28604 GHSA-8648-h559-8h42

Affected package: sitegeist/fluid-components

Affected version: <3.5.0

Reported by:
GitHub, FriendsOfPHP/security-advisories