Lucene search
K

6 matches found

OSV
OSV
added 2025/05/21 5:18 p.m.3 views

GHSA-6P8W-PC35-MQV8 [clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the clickstorm SEO csseo TYPO3 extension allows backend users to execute arbitrary script via the JSON-LD output...

5.5CVSS6.5AI score0.00196EPSS
Exploits0References5
Friends Of PHP
Friends Of PHP
added 2025/05/20 8:59 a.m.16 views

TYPO3-EXT-SA-2025-005: Cross-Site Scripting in extension "[clickstorm] SEO" (cs_seo)

More info at https://typo3.org/security/advisory/typo3-ext-sa-2025-005...

6.4CVSS7.2AI score0.00196EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.3 views

The vulnerability of the Clickstorm SEO (cs_seo) extension of the TYPO3 content management system, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Clickstorm SEO csseo extension of the TYPO3 content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.5CVSS5.2AI score0.00558EPSS
Exploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2025/03/19 2:15 a.m.11 views

Clickstorm SEO Allows Cross-Site Scripting (XSS)

A cross-site scripting XSS vulnerability has been discovered in the Clickstorm SEO extension. This vulnerabily is exploitable by a logged in backend user utilizing the TYPO3 backend user interface. This user can create output in the HTML context by exploiting improperly encoded user input. Update...

5.8AI score0.00558EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/03/19 2:15 a.m.3 views

GHSA-VMGW-24W6-9V82 Clickstorm SEO Allows Cross-Site Scripting (XSS)

A cross-site scripting XSS vulnerability has been discovered in the Clickstorm SEO extension. This vulnerabily is exploitable by a logged in backend user utilizing the TYPO3 backend user interface. This user can create output in the HTML context by exploiting improperly encoded user input. Update...

6.3CVSS5.7AI score0.00558EPSS
Exploits0References4
Friends Of PHP
Friends Of PHP
added 2025/03/18 8:51 a.m.11 views

TYPO3-EXT-SA-2025-003: Multiple vulnerabilities in extension “[clickstorm] SEO” (cs_seo)

More info at https://typo3.org/security/advisory/typo3-ext-sa-2025-003...

6.8AI score0.00558EPSS
Exploits0Affected Software1
Rows per page
Query Builder