[MEDIUM] TYPO3 API function vulnerable to Cross-site Scripting

PKSA-536c-fstd-1vzp CVE-2009-3633 GHSA-m7rg-85g8-28m9

Affected package: typo3/cms-core

Affected version: >=4.3alpha1,<4.3beta2|>=4.2.0,<4.2.10|>=4.1.0,<4.1.13|<=4.0.13

Reported by:
GitHub