GHSA-6p8w-pc35-mqv8

Source

https://github.com/advisories/GHSA-6p8w-pc35-mqv8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-6p8w-pc35-mqv8/GHSA-6p8w-pc35-mqv8.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-6p8w-pc35-mqv8

Aliases

CVE-2025-48203

Published

2025-05-21T17:18:16Z

Modified

2025-05-21T19:08:09.973959Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C CVSS Calculator

Summary

[clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability

Details

Cross-site scripting (XSS) vulnerability in the [clickstorm] SEO (cs_seo) TYPO3 extension allows backend users to execute arbitrary script via the JSON-LD output.

Database specific

{
    "nvd_published_at": "2025-05-21T16:15:32Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2025-05-21T17:18:16Z"
}

References

Affected packages

Packagist / clickstorm/cs-seo

Package

Name: clickstorm/cs-seo
Purl: pkg:composer/clickstorm/cs-seo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

9.0.0

Fixed

9.3.0

Affected versions

9.*

9.0.0

9.0.1

9.1.0

9.2.0

Packagist / clickstorm/cs-seo

Package

Name: clickstorm/cs-seo
Purl: pkg:composer/clickstorm/cs-seo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

8.0.0

Fixed

8.4.0

Affected versions

8.*

8.0.0

8.0.1

8.1.0

8.1.1

8.1.2

8.2.0

8.2.1

8.3.0

Packagist / clickstorm/cs-seo

Package

Name: clickstorm/cs-seo
Purl: pkg:composer/clickstorm/cs-seo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

7.0.0

Fixed

7.5.0

Affected versions

7.*

7.0.0

7.0.1

7.1.0

7.2.0

7.2.1

7.3.0

7.3.1

7.3.2

7.3.3

7.4.0

Packagist / clickstorm/cs-seo

Package

Name: clickstorm/cs-seo
Purl: pkg:composer/clickstorm/cs-seo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.3.0

Fixed

6.8.0

Affected versions

6.*

6.3.0

6.3.1

6.3.2

6.4.0

6.4.1

6.5.0

6.6.0

6.7.0