Product · pimcore

pimcore/pimcore

75 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

61 results · Clear filters · Feed

Medium 6.8

CVE-2022-1351

Stored XSS in Tooltip in pimcore/pimcore

Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Apr 14, 2022
Medium 4.2

CVE-2022-0705

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 16, 2022
Medium 4.0

CVE-2022-0704

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 16, 2022
Medium 6.8

CVE-2022-0911

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 16, 2022
Medium 6.8

CVE-2022-0893

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 15, 2022
Medium 4.6

CVE-2022-0832 EPSS 67%

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 4, 2022
Medium 4.6

CVE-2022-0831

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 4, 2022
Medium 4.9

CVE-2022-0665

Path Traversal in pimcore/pimcore

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Feb 22, 2022
Medium 4.3

CVE-2022-0510

Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Feb 8, 2022
Medium 6.6

CVE-2022-0509

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Feb 8, 2022
Medium 4.3

CVE-2022-0348

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 27, 2022
Medium 6.6

CVE-2022-0285

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 20, 2022
Medium 6.6

CVE-2022-0263

Unrestricted Upload of File with Dangerous Type in pimcore/pimcore

Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 18, 2022
Medium 6.6

CVE-2022-0262

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 18, 2022
Medium 4.3

CVE-2021-4146

Business Logic Errors in pimcore/pimcore

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 18, 2022
Medium 6.5

CVE-2022-0260

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 18, 2022
Medium 6.1

CVE-2022-0257

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 17, 2022
Medium 5.3

CVE-2022-0256

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 17, 2022
Medium 6.6

CVE-2021-4139

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

pimcore pimcore/pimcore pimcore/pimcore Packagist

Dec 21, 2021
Medium 5.5

CVE-2021-4081

Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

pimcore pimcore/pimcore pimcore/pimcore Packagist

Dec 10, 2021
Medium 4.3

CVE-2021-4082

Cross-Site Request Forgery (CSRF) in pimcore/pimcore

pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

pimcore pimcore/pimcore pimcore/pimcore Packagist

Dec 10, 2021