Arbitrary Code Execution and Cross-Site Scripting in Backend API

PKSA-f5jr-dg29-ng7s

Affected package: typo3/cms-core

Affected version: >=8.0.0,<8.7.27|>=9.0.0,<9.5.8

Reported by:
FriendsOfPHP/security-advisories