Composer clickstorm/cs-seo has 2 known advisories in the phpwarden feed. Feed 2026.10.29.4, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2025-48203 | [clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability | medium | 5.5 | >=9.0.0 and <9.3.0 or >=8.0.0 and <8.4.0 or >=7.0.0 and <7.5.0 or >=6.3.0 and <6.8.0 | 9.3.0, 8.4.0, 7.5.0, 6.8.0 |
| CVE-2025-30081 | Clickstorm SEO Allows Cross-Site Scripting (XSS) | medium | 6.3 | >=9.0.0 and <9.2.0 or >=8.0.0 and <8.3.0 or >=7.0.0 and <7.4.0 or >=6.0.0 and <6.7.0 | 9.2.0, 8.3.0, 7.4.0, 6.7.0 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked