TYPO3-EXT-SA-2026-033: Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)

PKSA-s8v1-krjv-23c8 CVE-2026-113442

Affected package: codingms/fluid-form

Affected version: >=6.0.0,<6.0.6|<5.0.10

Reported by:
FriendsOfPHP/security-advisories