The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.

Published Aug 13, 2021 · Updated Aug 4, 2024 · Assigned by mitre