The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/33xxx/CVE-2022-33154.json",
"cna_assigner": "mitre",
"unresolved_ranges": [
{
"extracted_events": [
{
"fixed": "1.13.1"
},
{
"introduced": "2.x"
},
{
"fixed": "2.5.1"
}
],
"source": "DESCRIPTION"
}
]
}{
"cpe": "cpe:2.3:a:schema_project:schema:*:*:*:*:*:typo3:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.13.1"
},
{
"introduced": "2.0.0"
},
{
"fixed": "2.5.1"
}
],
"source": "CPE_RANGE"
}