Skip to content
OpenAdvisories

Package · Packagist

pimcore/pimcore

135 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-14059 Public exploit

    Pimcore XSS Vulnerability

    Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.

    pimcore/pimcore Packagist
  • Medium 6.5
    CVE-2018-14058 Public exploit EPSS 29%

    Pimcore SQLi Vulnerability

    Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

    pimcore/pimcore Packagist