CVE-2025-48206

The ns_backup (Backup Plus) extension for TYPO3 is vulnerable to Cross-Site Scripting (XSS) in versions up to and including 13.0.0 . The root cause is improper input sanitization , which allows an attacker to inject malicious scripts by submitting crafted input. Successful exploitation could allo...