PT-2025-22372 · Cs Seo · Cs Seo

Published 2025-05-21 · Updated 2025-12-27 · CVE-2025-48203

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions cs seo extension versions prior to 9.2.1

Description The issue concerns a cross-site scripting (XSS) vulnerability. It allows backend users to execute arbitrary scripts via the JSON-LD output.

Recommendations For versions prior to 9.2.1, update to version 9.2.1 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-48203

GHSA-6P8W-PC35-MQV8

Affected Products

Cs Seo

References · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/clickstorm/cs-seo/CVE-2025-48203.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-6p8w-pc35-mqv8 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48203 · Security Note
• https://github.com/clickstorm/cs_seo · Note
• https://github.com/clickstorm/cs_seo/commit/1cf6c40821102b1f1508fe4e76825569340c8f90 · Note
• https://typo3.org/security/advisory/typo3-ext-sa-2025-005 · Note
• https://t.me/cvetracker/24384 · Telegram Post
• https://twitter.com/CVEnew/status/2005031817930310003 · Twitter Post