GitHub Advisoryadvisory · Packagist

GHSA-xg53-mhh9-3cq7 The Backup Plus extension for TYPO3 (ns_backup) allows XSS

LOW Published 2025-05-21 Modified 2025-05-21 Official page ↗

Aliases: CVE-2025-48206
Ecosystem: Packagist
Packages: nitsan/ns-backup
Severity: Low
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
Weaknesses: CWE-79
Reviewed: 2025-05-21

Affected packages

• Packagist nitsan/ns-backup: < 13.0.1 → fixed in 13.0.1

Description

The ns_backup extension through 13.0.0 for TYPO3 allows XSS.

Related

Alias · CVE (1)

CVE-2025-48206 The ns_backup extension through 13.0.0 for TYPO3 allows XSS. vulnerability

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References