[MEDIUM] Cross-Site Scripting in Bootstrap CSS toolkit

PKSA-ww37-6vs7-z8br CVE-2018-14041 GHSA-pj7m-g53m-7638

Affected package: typo3/cms

Affected version: >=8.0.0,<8.7.23|>=9.0.0,<9.5.4

Reported by:
GitHub, FriendsOfPHP/security-advisories