pimcore/pimcore

75 results · Feed

• Medium 5.2
  CVE-2023-1067

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 27, 2023
• Medium 6.3
  CVE-2023-0827

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 14, 2023
• Medium 6.1
  CVE-2023-0323

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 16, 2023
• Medium 6.8
  CVE-2022-3255

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can: Perform any action within the application that the user can perform. View any information…

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Sep 21, 2022
• Medium 5.8
  CVE-2022-3211

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Sep 15, 2022
• Medium 6.7
  CVE-2022-2796

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.4.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Aug 23, 2022
• High 7.2
  CVE-2022-1429 EPSS 64%

  SQL injection in GridHelperService.php in pimcore/pimcore

  SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 22, 2022
• Medium 6.8
  CVE-2022-1351

  Stored XSS in Tooltip in pimcore/pimcore

  Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 14, 2022
• High 8.8
  CVE-2022-1339

  SQL injection in ElementController.php in pimcore/pimcore

  SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 13, 2022
• High 7.2
  CVE-2022-1219

  SQL injection in RecyclebinController.php in pimcore/pimcore

  SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Apr 8, 2022
• Medium 4.2
  CVE-2022-0705

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 16, 2022
• Medium 4.0
  CVE-2022-0704

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 16, 2022
• Medium 6.8
  CVE-2022-0911

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 16, 2022
• Medium 6.8
  CVE-2022-0893

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 15, 2022
• High 8.2
  CVE-2022-0894

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 15, 2022
• Medium 4.6
  CVE-2022-0832 EPSS 67%

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 4, 2022
• Medium 4.6
  CVE-2022-0831

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Mar 4, 2022
• Medium 4.9
  CVE-2022-0665

  Path Traversal in pimcore/pimcore

  Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 22, 2022
• High 7.6
  CVE-2022-0565

  Cross-site Scripting in pimcore/pimcore

  Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 12, 2022
• Medium 4.3
  CVE-2022-0510

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 8, 2022
• Medium 6.6
  CVE-2022-0509

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Feb 8, 2022
• Medium 4.3
  CVE-2022-0348

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 27, 2022
• High 8.1
  CVE-2022-0251

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 26, 2022
• Medium 6.6
  CVE-2022-0285

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 20, 2022
• Medium 6.6
  CVE-2022-0263

  Unrestricted Upload of File with Dangerous Type in pimcore/pimcore

  Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 18, 2022
• Medium 6.6
  CVE-2022-0262

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 18, 2022
• Medium 4.3
  CVE-2021-4146

  Business Logic Errors in pimcore/pimcore

  Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 18, 2022
• Medium 6.5
  CVE-2022-0260

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 18, 2022
• Medium 6.1
  CVE-2022-0257

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 17, 2022
• High 8.3
  CVE-2022-0258

  SQL Injection in pimcore/pimcore

  pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 17, 2022
• Medium 5.3
  CVE-2022-0256

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Jan 17, 2022
• Medium 6.6
  CVE-2021-4139

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Dec 21, 2021
• High 7.4
  CVE-2021-4084

  Cross-site Scripting (XSS) - Stored in pimcore/pimcore

  pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Dec 10, 2021
• Medium 5.5
  CVE-2021-4081

  Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

  pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Dec 10, 2021
• Medium 4.3
  CVE-2021-4082

  Cross-Site Request Forgery (CSRF) in pimcore/pimcore

  pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

  pimcore pimcore/pimcore pimcore/pimcore Packagist
  Dec 10, 2021