Cross-site Scripting (XSS)

typo3/cms-core is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization on the values of settings which are rendered through FormMananager/ViewModel.js...