~ / search / GHSA-gh4g-65f6-84g5

GHSA-gh4g-65f6-84g5

pimcore is vulnerable to cross-site scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-1312

Packages

EcosystemPackageAffectedFixed in
Packagist pimcore/pimcore < 10.5.19 10.5.19

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.

References

External links from the advisory. They lead to third-party sites.