[MEDIUM] Cross-Site Scripting in Bootstrap CSS toolkit

PKSA-6rbt-6s1d-gvry CVE-2018-14041 GHSA-pj7m-g53m-7638

Affected package: typo3/cms-core

Affected version: >=8.0.0,<8.7.23|>=9.0.0,<9.5.4

Reported by:
GitHub, FriendsOfPHP/security-advisories