pimcore/pimcore

61 results · Clear filters · Feed

• Medium 4.0
  CVE-2023-2332

  Stored Cross-site Scripting (XSS) in pimcore/pimcore

  A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scr…

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Nov 15, 2024
• Medium 4.0
  CVE-2023-5873

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Oct 31, 2023
• Medium 6.4
  CVE-2023-4453

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Aug 21, 2023
• Medium 6.0
  CVE-2023-3822

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jul 21, 2023
• Medium 6.1
  CVE-2023-3821

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jul 21, 2023
• Medium 6.3
  CVE-2023-2984

  Path Traversal: '\..\filename' in pimcore/pimcore

  Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 30, 2023
• Medium 6.5
  CVE-2023-2983

  Privilege Defined With Unsafe Actions in pimcore/pimcore

  Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 30, 2023
• Medium 6.3
  CVE-2023-2730

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 16, 2023
• Medium 6.8
  CVE-2023-2615

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 6.8
  CVE-2023-2614

  Cross-site Scripting (XSS) - DOM in pimcore/pimcore

  Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 5.7
  CVE-2023-2630

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 6.8
  CVE-2023-2616

  Cross-site Scripting (XSS) - Generic in pimcore/pimcore

  Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  May 10, 2023
• Medium 6.3
  CVE-2023-2361

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 28, 2023
• Medium 5.2
  CVE-2023-2328

  Cross-site Scripting (XSS) - Generic in pimcore/pimcore

  Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 6.8
  CVE-2023-2323

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 4.0
  CVE-2023-2342

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 6.1
  CVE-2023-2339

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 5.5
  CVE-2023-2336

  Path Traversal in pimcore/pimcore

  Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 5.2
  CVE-2023-2343

  Cross-site Scripting (XSS) - DOM in pimcore/pimcore

  Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 5.2
  CVE-2023-2322

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 4.0
  CVE-2023-2327

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 6.1
  CVE-2023-2340

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 27, 2023
• Medium 5.1
  CVE-2023-1704

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 29, 2023
• Medium 4.0
  CVE-2023-1702

  Cross-site Scripting (XSS) - Generic in pimcore/pimcore

  Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 29, 2023
• Medium 4.0
  CVE-2023-1701

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 29, 2023
• Medium 5.3
  CVE-2023-1703

  Cross-site Scripting (XSS) - Generic in pimcore/pimcore

  Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 29, 2023
• Medium 6.7
  CVE-2023-1578 EPSS 63%

  SQL Injection in pimcore/pimcore

  SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 22, 2023
• Medium 4.0
  CVE-2023-1517

  Cross-site Scripting (XSS) - DOM in pimcore/pimcore

  Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 20, 2023
• Medium 5.2
  CVE-2023-1515

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 20, 2023
• Medium 4.0
  CVE-2023-1429

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 16, 2023
• Medium 5.2
  CVE-2023-1312

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 10, 2023
• Medium 4.8
  CVE-2023-1286

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 9, 2023
• Medium 4.8
  CVE-2023-1117

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 1, 2023
• Medium 5.4
  CVE-2023-1116

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 1, 2023
• Medium 5.2
  CVE-2023-1067

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 27, 2023
• Medium 6.3
  CVE-2023-0827

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 14, 2023
• Medium 6.1
  CVE-2023-0323

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 16, 2023
• Medium 6.8
  CVE-2022-3255

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can: Perform any action within the application that the user can perform. View any information…

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Sep 21, 2022
• Medium 5.8
  CVE-2022-3211

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Sep 15, 2022
• Medium 6.7
  CVE-2022-2796

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.4.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Aug 23, 2022