CVE-2025-30081

Name of the Vulnerable Software and Affected Versions Clickstorm SEO extension for TYPO3 versions prior to 6.7.0 Clickstorm SEO extension for TYPO3 versions prior to 7.4.0 Clickstorm SEO extension for TYPO3 versions prior to 8.3.0 Clickstorm SEO extension for TYPO3 versions prior to 9.2.0

Description The issue exists due to inadequate protection of the webpage structure. It allows a remote attacker to conduct cross-site scripting attacks. A logged-in backend user can exploit improperly encoded user input to create output in the HTML context using the TYPO3 backend user interface.

Recommendations For versions prior to 6.7.0, update to version 6.7.0 or later. For versions prior to 7.4.0, update to version 7.4.0 or later. For versions prior to 8.3.0, update to version 8.3.0 or later. For versions prior to 9.2.0, update to version 9.2.0 or later.