[MEDIUM] Arbitrary Code Execution and Cross-Site Scripting in Backend API

PKSA-5tf7-6x9k-c3q3 GHSA-mh3r-6cp5-hc2j

Affected package: typo3/cms

Affected version: >=8.0.0,<8.7.27|>=9.0.0,<9.5.8

Reported by:
GitHub, FriendsOfPHP/security-advisories