CVE-2021-31778: Improper Neutralization of Input During Web Page Generation

The media2click aka 2 Clicks for External Media extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account...