{"id":"CVE-2025-48203","aliases":[],"url":"https://o3.security/vulnerability/CVE-2025-48203","summary":"[clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability","details":"Cross-site scripting (XSS) vulnerability in the [clickstorm] SEO (cs_seo) TYPO3 extension allows backend users to execute arbitrary script via the JSON-LD output.","published":"2025-05-21T17:18:16Z","modified":"2025-05-21T19:08:09.973959Z","cvss":{"score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"clickstorm/cs-seo","fixedVersion":"9.3.0"},{"ecosystem":"Packagist","name":"clickstorm/cs-seo","fixedVersion":"8.4.0"},{"ecosystem":"Packagist","name":"clickstorm/cs-seo","fixedVersion":"7.5.0"},{"ecosystem":"Packagist","name":"clickstorm/cs-seo","fixedVersion":"6.8.0"}],"fix":{"url":"https://github.com/clickstorm/cs_seo/commit/1cf6c40821102b1f1508fe4e76825569340c8f90","label":"clickstorm/cs_seo@1cf6c40"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48203"},{"type":"WEB","url":"https://github.com/clickstorm/cs_seo/commit/1cf6c40821102b1f1508fe4e76825569340c8f90"},{"type":"WEB","url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/clickstorm/cs-seo/CVE-2025-48203.yaml"},{"type":"PACKAGE","url":"https://github.com/clickstorm/cs_seo"},{"type":"WEB","url":"https://typo3.org/security/advisory/typo3-ext-sa-2025-005"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-05-21T19:08:09.973959Z"}}