CVE-2025-48203

Summary

The cs_seo extension through 9.2.0 for TYPO3 allows XSS.

Affected Software

VendorProductVersion RangeStatus
TYPO3cs seo extension6.3.0 < 6.8.0affected
TYPO3cs seo extension7.0.0 < 7.5.0affected
TYPO3cs seo extension8.0.0 < 8.4.0affected
TYPO3cs seo extension9.0.0 < 9.3.0affected

Weaknesses

  • CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References