GHSA-7p53-8wjr-j8h4low1.3
Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting
Impact
Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Source excerpt · OSVAffected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
b13/seo_basics Packagist
| Affected range | Recorded fix |
|---|---|
| Earlier releases before 0.8.2Ecosystem versions | 0.8.2 |
Version evidence: OSV · GHSA-7p53-8wjr-j8h4
View original version evidence (0 explicit versions)
Original source description
Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- Security advisory nvd.nist.gov/vuln/detail/CVE-2012-5888
- Security advisory exchange.xforce.ibmcloud.com/vulnerabilities/74483
- Source reference github.com/b13/t3ext-seo_basics
- Security advisory web.archive.org/web/20120709063251/http://www.securityfocus.com/bid/52772
- Security advisory web.archive.org/web/20120711210745/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-006
- Source reference forge.typo3.org/issues/35532