The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-33154.json"