Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.
Advisories for Composer/Yoast-Seo-for-Typo3/Yoast_seo package
2021
Server-Side Request Forgery (SSRF)
The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.