{"action":"Upgrade clickstorm/cs-seo to 6.8.0 or later.","affected":[{"fixed":"9.3.0","introduced":"9.0.0"},{"fixed":"8.4.0","introduced":"8.0.0"},{"fixed":"7.5.0","introduced":"7.0.0"},{"fixed":"6.8.0","introduced":"6.3.0"}],"component":"clickstorm/cs-seo","cve_ids":["CVE-2025-48203"],"ecosystem":"Packagist","epss":0.00248,"exploited":false,"fixed_versions":["9.3.0","8.4.0","7.5.0","6.8.0"],"ghsa_id":"GHSA-6p8w-pc35-mqv8","id":"tcs_01M5KEX7WH77ZY4EZJPPX7T8JQ","modified_at":"2025-05-21T19:08:09.973959Z","published_at":"2025-05-21T17:18:16Z","references":["https://osv.dev/vulnerability/GHSA-6p8w-pc35-mqv8","https://nvd.nist.gov/vuln/detail/CVE-2025-48203","https://github.com/clickstorm/cs_seo/commit/1cf6c40821102b1f1508fe4e76825569340c8f90","https://github.com/FriendsOfPHP/security-advisories/blob/master/clickstorm/cs-seo/CVE-2025-48203.yaml","https://github.com/clickstorm/cs_seo","https://typo3.org/security/advisory/typo3-ext-sa-2025-005"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-6p8w-pc35-mqv8","url":"https://osv.dev/vulnerability/GHSA-6p8w-pc35-mqv8"}],"summary":"[clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability"}