[MEDIUM] TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer

PKSA-jm7x-1zf6-9kw1 CVE-2022-31049 GHSA-h4mx-xv96-2jgm

Affected package: typo3/cms

Affected version: >=10.0.0,<10.4.29|>=11.0.0,<11.5.11

Reported by:
GitHub, FriendsOfPHP/security-advisories