GHSA-455w-gv5p-wgg3
Cross-site Scripting in pimcore
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.2.9 | 10.2.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
pimcore is vulnerable to Stored XSS at Name field in the setting tab of the Global Targeting Rules.
References
External links from the advisory. They lead to third-party sites.