GHSA-6p8w-pc35-mqv8
Suggest an improvement- Source
- https://github.com/advisories/GHSA-6p8w-pc35-mqv8
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-6p8w-pc35-mqv8/GHSA-6p8w-pc35-mqv8.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-6p8w-pc35-mqv8
- Aliases
-
- CVE-2025-48203
- Published
- 2025-05-21T17:18:16Z
- Modified
- 2025-05-21T19:08:09Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C CVSS Calculator
- Summary
- [clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability
- Details
-
Cross-site scripting (XSS) vulnerability in the [clickstorm] SEO (cs_seo) TYPO3 extension allows backend users to execute arbitrary script via the JSON-LD output.
- Database specific
{ "cwe_ids": [ "CWE-79" ], "github_reviewed": true, "github_reviewed_at": "2025-05-21T17:18:16Z", "nvd_published_at": "2025-05-21T16:15:32Z", "severity": "MODERATE" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2025-48203
- https://github.com/clickstorm/cs_seo/commit/1cf6c40821102b1f1508fe4e76825569340c8f90
- https://github.com/FriendsOfPHP/security-advisories/blob/master/clickstorm/cs-seo/CVE-2025-48203.yaml
- https://github.com/clickstorm/cs_seo
- https://typo3.org/security/advisory/typo3-ext-sa-2025-005
Affected packages
Packagist / clickstorm/cs-seo
Package
- Name
- clickstorm/cs-seo
- Purl
- pkg:composer/clickstorm/cs-seo
Packagist / clickstorm/cs-seo
Package
- Name
- clickstorm/cs-seo
- Purl
- pkg:composer/clickstorm/cs-seo
Packagist / clickstorm/cs-seo
Package
- Name
- clickstorm/cs-seo
- Purl
- pkg:composer/clickstorm/cs-seo
Packagist / clickstorm/cs-seo
Package
- Name
- clickstorm/cs-seo
- Purl
- pkg:composer/clickstorm/cs-seo