Cross-Site Scripting in TYPO3 CMS Backend

PKSA-ytg9-3z8d-xh45

Affected package: typo3/cms

Affected version: >=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.6.0|>=8.6.0,<8.7.0|>=8.7.0,<8.7.5

Reported by:
FriendsOfPHP/security-advisories