{"id":"GHSA-7p53-8wjr-j8h4","aliases":["CVE-2012-5888"],"title":"Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"LOW","description":"Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","severity":"low","score":1.3,"published":"2022-05-17T01:38:30.000Z","modified":"2025-04-12T04:27:04.723Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"b13/seo_basics","sources":[{"name":"OSV · GHSA-7p53-8wjr-j8h4","url":"https://osv.dev/vulnerability/GHSA-7p53-8wjr-j8h4"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.8.2"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["0.8.2"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-5888","https://exchange.xforce.ibmcloud.com/vulnerabilities/74483","https://github.com/b13/t3ext-seo_basics","https://web.archive.org/web/20120709063251/http://www.securityfocus.com/bid/52772","https://web.archive.org/web/20120711210745/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-006","http://forge.typo3.org/issues/35532"],"sources":[{"name":"OSV","id":"GHSA-7p53-8wjr-j8h4","modified":"2025-04-12T04:27:04.723905Z","url":"https://osv.dev/vulnerability/GHSA-7p53-8wjr-j8h4"}],"assessments":[{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U","score":1.3}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T00:50:31.383Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}