The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allows XSS.
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00503·Published 2022-07-12·Fixed in 1.2.23CWE-79