Medium · 4.8 CVE-2023-1286 EUVD-2023-0950GHSA-8jv7-vwrc-mv4g

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Published Mar 9, 2023 · Updated Feb 28, 2025 · Assigned by @huntrdev

Description

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

Vendor	Product	Affected	Fixed
pimcore	pimcore/pimcore	unspecified – < 10.5.19	10.5.19

Ecosystem	Package	Affected	Fixed	Record
Packagist	pimcore/pimcore	< 10.5.19	10.5.19	GHSA-8jv7-vwrc-mv4g