Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-48203 EUVD-2025-16027GHSA-6p8w-pc35-mqv8

[clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability

Published May 21, 2025 · Updated May 21, 2025 · Assigned by mitre

Vendor: TYPO3 Product: cs seo extension Package: clickstorm/cs-seo Ecosystem: Packagist

Description

The cs_seo extension through 9.2.0 for TYPO3 allows XSS.

Affected products

VendorProductAffectedFixed
TYPO3 cs seo extension 6.3.0 – < 6.8.0, 7.0.0 – < 7.5.0, 8.0.0 – < 8.4.0, 9.0.0 – < 9.3.0 6.8.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist clickstorm/cs-seo >= 9.0.0, < 9.3.0 9.3.0 GHSA-6p8w-pc35-mqv8
Packagist clickstorm/cs-seo >= 8.0.0, < 8.4.0 8.4.0 GHSA-6p8w-pc35-mqv8
Packagist clickstorm/cs-seo >= 7.0.0, < 7.5.0 7.5.0 GHSA-6p8w-pc35-mqv8
Packagist clickstorm/cs-seo >= 6.3.0, < 6.8.0 6.8.0 GHSA-6p8w-pc35-mqv8

Advisories 1

References