Skip to content
OpenAdvisories

Package · Packagist

pimcore/pimcore

135 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

84 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-18982

    Pimcore Cross-site Scripting (XSS) vulnerability

    bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.

    pimcore/pimcore Packagist
  • Medium 6.1
    CVE-2019-18656

    Pimcore XSS Vulnerability

    Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.

    pimcore/pimcore Packagist
  • Medium 5.4
    CVE-2018-14059 Public exploit

    Pimcore XSS Vulnerability

    Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.

    pimcore/pimcore Packagist
  • Medium 6.5
    CVE-2018-14058 Public exploit EPSS 29%

    Pimcore SQLi Vulnerability

    Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

    pimcore/pimcore Packagist