CVE-2025-48203
The cs_seo extension through 9.2.0 for TYPO3 allows XSS.
- Update to 6.8.0
- Update to 7.5.0
- Update to 8.4.0
- Update to 9.3.0
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for clickstorm/cs-seo in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
The cs_seo extension through 9.2.0 for TYPO3 allows XSS.
A cross-site scripting (XSS) vulnerability has been discovered in the Clickstorm SEO extension. This vulnerabily is exploitable by a logged in backend user utilizing the TYPO3 backend user interface. This user can create output in the HTML context by exploiting improperly encoded user input. Updates 6.7.0, 7.4.0, 8.3.0 and 9.2.0 are available for download.
Check your installed stack and versions against the current vulnerability feeds.