Backup Plus - Easily backup your entire TYPO3 website. The Backup Plus extension for TYPO3 lets you save your code, files, and database with just a few clicks. Install Backup Plus and connect it to your cloud storage (like Google Drive, Dropbox, Amazon S3, SFTP, Rsync, etc.).
62%
Total Score
caution
Usable with caveats: recent releases exist, but repository activity has stopped and licensing and workflow hygiene need attention.
The artifact declares GPL-2.0+ but its license file is detected as GPL-3.0, creating uncertainty about the terms that govern this release despite a license file being present.
The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign that ongoing maintenance has recently stalled.
Composer is used for builds, but no repository security-scanning tool was detected, leaving automated security hygiene unconfirmed.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.
The single workflow was fully analyzed with no dangerous audit findings, but its one action use is unpinned, which weakens build reproducibility and supply-chain hygiene.
| Title | Versions | Severity |
|---|---|---|
CVE-2025-48206 nitsan/ns-backup is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 13.0.1. | 0.0.0 - 13.0.1 | Low |
CVE-2025-48204 nitsan/ns-backup is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 13.0.1. | 0.0.0 - 13.0.1 | Medium |
CVE-2025-48201 nitsan/ns-backup is vulnerable to Direct Request ('Forced Browsing') in versions 0.0.0 - 13.0.1. | 0.0.0 - 13.0.1 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12 || ^13 || ^14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.