[MEDIUM] TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController

PKSA-w21x-17n7-44qc CVE-2022-36107 GHSA-9c6w-55cp-5w25

Affected package: typo3/cms

Affected version: >=10.0.0,<10.4.32|>=11.0.0,<11.5.16

Reported by:
GitHub, FriendsOfPHP/security-advisories