MEDIUM
GHSA-259v-xm34-p7fr
Typo3 Cross-Site Scripting in Language Pack Handling
Quick fix
GHSA-259v-xm34-p7fr — typo3/cms: upgrade to the fixed version with the command below.
composer require typo3/cms:^9.5.4Details
Failing to properly encode information from external sources, language pack handling in the install tool is vulnerable to cross-site scripting.
Are you affected?
Enter the version of the package you're using.