[MEDIUM] TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer

PKSA-4kgv-d12j-68gk CVE-2022-31049 GHSA-h4mx-xv96-2jgm

Affected package: typo3/cms-core

Affected version: >=10.0.0,<10.4.29|>=11.0.0,<11.5.11

Reported by:
GitHub, FriendsOfPHP/security-advisories